asyncssh might not be FIPS certified

[cryptomilk]

In case you want to be sure, you can use the ansbile python bindings for https://github.com/ansible/pylibssh. You might want to check with the crypto team.

[subpop]

I think you're correct. From what I understand, AsyncSSH uses Python's cryptography module for its cryptographic needs (ciphers, key exchange, public-key/authentication, etc.) but it is not explicitly FIPS compliant or certified. I guess we could gain some level of confidence if we could ensure that the backing cryptography libraries are at least FIPS-compliant, but that doesn't make AsyncSSH itself compliant. Thanks for the suggestion! We'll probably look into using pylibssh.