-
Type: Improvement
-
Resolution: Done
-
Priority: Major - P3
-
Affects Version/s: None
-
Component/s: None
-
None
Our SCRAM-SHA-1 implementation uses raw CC_SHA1() from Darwins Common Crypto.
This is unlikely FIPS compliant (similar to SHA1() in libcrypto is not FIPS compliant).
Not sure if anyone would actually use the driver on FIPS enabled Darwin client, but we should probably look at it.