feat(fips): allow key generation and loading in FIPS 140-3 mode#809

Open

JasonPowr wants to merge 2 commits into

mainfrom

JasonPowr commented Jul 7, 2026

Member

Summary

Allow cosign key generation and loading in FIPS mode by storing keys as unencrypted PKCS#8 PEM, bypassing non-FIPS scrypt/NaCl encryption
Password-protected keys remain blocked in FIPS mode
Unencrypted keys rejected in non-FIPS mode to prevent password bypass


          feat(fips): allow key generation and loading in FIPS 140-3 mode

343275c

JasonPowr requested a review from osmman

July 15, 2026 10:22


          Merge branch 'main' into fips-work

a9c6166

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet