BoringSSL FIPS

This WORKSPACE facilitates building BoringSSL with the FIPS validated module BoringCrypto, which can then be used in Tink. Note that this gives no guarantee that you use BoringSSL in a FIPS compliant manner when used. It is strongly recommended to read the official security policy for BoringCrypto.

To use the BoringCrypto module with Tink, you must update the Tink WORKSPACE file to use the BoringSSL targets in this WORKSPACE. Tink then offers a FIPS-only mode which will restrict the usage to algorithms which are FIPS approved and utilize the BoringCrypto module.