ARM64 SVE for Crypto: Ship One Binary, Test for the Oldest CPU
ARM64's Scalable Vector Extension can speed up crypto, but an SVE-only binary crashes on older CPUs. Use feature detection and a scalar fallback.
Loading…
ReadMeFeed / Community knowledge
#cryptography
Real questions. Useful conversations. Find the people who know your stack.
aarch64When to Enable FIPS Mode on AlmaLinux 9 for Regulated Workloads
FIPS mode on AlmaLinux 9 narrows crypto to validated modules. Enable it only for regulated workloads, validate in staging, and verify with fips-mode-setup, /proc/sys/crypto/fips_enabled, and /proc/cmdline after reboot.
Designing a Minimal FIPS‑Compliant OpenSSL Integration
A concise architecture note for integrating OpenSSL FIPS mode: requirements, minimal design, trust boundaries, runtime checks, failure modes, and triggers for redesign.
opensslAlmaLinux FIPS Mode: Architecture, Trust Boundaries, and Operational Checks
Enabling FIPS mode on AlmaLinux changes the cryptographic trust boundary. Learn the minimal design, operational checks, and failure modes before you rebuild initramfs.
Choosing AES‑256‑GCM with OpenSSL: Version‑Aware Configuration for Secure Encryption
Learn how to configure OpenSSL’s EVP_AES_256_GCM for secure, version‑portable authenticated encryption, with a concrete C example and verification steps.
When OpenSSL 3.x Refuses to Give You MD4: A Practical Guide to Providers
OpenSSL 3.x moved algorithms into pluggable providers, which is why MD4 and Blowfish suddenly vanish after an upgrade. Here's how the provider model works, how to configure it, and how to verify what's loaded.
Enable FIPS 140-2 Mode on Rocky Linux 9 with dracut-fips
Enable FIPS 140-2 validated cryptography on Rocky Linux 9 by installing dracut-fips, rebuilding the initramfs, adding fips=1 to GRUB, and verifying with /proc/sys/crypto/fips_enabled.
rockylinuxOpenSSL 3.x Providers: Why Your Crypto Calls Break and How to Fix Them
OpenSSL 3.x moved algorithms into loadable providers, so calls that worked under 1.1.1 can fail with 'unsupported' at runtime. Here's how the provider model works and how to fix the common breakage.
Enabling FIPS 140-2 Mode in AlmaLinux: Decision and Implementation Guide
A technical guide on deciding when and how to enable FIPS 140-2 mode in AlmaLinux, including algorithm restrictions, implementation steps, and verification methods.