Hello,
The application I work on depends on MySql.Data and we're required to be FIPS compliant. One of the dependencies of MySql.Data is Portable.BouncyCastle (NuGet Gallery | MySql.Data 8.1.0) which is not FIPS compliant but has a FIPS-compliant alternative (bouncycastle.org). That would be required for the SSL certificate signature validation, which Bouncy Castle provides examples using the FIPS-validated algorithms.
Is there any plan to release a FIPS-compliant MySql.Data nuget package? Will it still rely on BouncyCastle or will it use System.Security.Criptography instead?
Thank you!