Support for FIPS 140-3 compliance in Docker and build scripts

[HalFinneyIsMyHomeBoy]

Enforce FIPS 140-3 by default

• Without FIPS: (current mode)

  • Only one source of entropy is used
  • crypto/rand.Reader uses only the operating system’s RNG via crypto/internal/sysrand.
  • No DRBG is used; output is directly from the OS.

• With FIPS enabled: (new default)

  • Two different sources of entropy are mixed together
  • crypto/rand.Reader is backed by an SP 800-90A DRBG (crypto/internal/fips140/drbg), seeded from a dedicated FIPS entropy source.
  • On every read, 128 bits of OS randomness are mixed in as additional input, strengthening the output per FIPS requirements.

Reference: https://go.dev/doc/security/fips140

[boldbitcoin]

FIPs compliance applied 👍