Get the latest tech news
FIPS 140-3 is not a security guarantee, and auditors know it
FIPS-validated modules shipped ROCA, EUCLEAK, Dual_EC_DRBG, and a YubiKey flaw caused by the FIPS self-tests themselves. What the certificate actually attests, what FIPS mode costs in performance, why it breaks Bitcoin tooling like BIP32, and where auditors actually look.
None
Or read this on Hacker News