fipsmode

var Strict = sync.OnceValue(func() bool {
	if !Enabled() {
		return false
	}

	_, err := sha1.New().Write(nil)

	strict := err != nil

	return strict
})

Strict checks if the strict FIPS mode is enabled.

Go doesn't provide a simple way to check for strict FIPS mode, so we use a side-effect of SHA-1 to fail.