THE FIPS 140-3 GO CRYPTOGRAPHIC MODULE

Summary from the TLDR InfoSec newsletter

The Go programming language has introduced native FIPS 140-3 compliance support directly into its standard library and `go` command, starting with Go 1.24. Developers can enable FIPS 140-3 mode by setting the `fips140=on` GODEBUG option (either as an environment variable or in go.mod), and can build against validated cryptographic modules using `GOFIPS140=v1.0.0 go build`. This native integration eliminates the need for unsupported third-party solutions, providing a seamless developer experience with cross-compilation support and no performance overhead from foreign function interfaces.