FIPS 140-3 is not a security guarantee, and auditors know it

· Hacker News