I know most people around here (including myself) are anti-FIPS, but I have a FIPS related question.
Could a crypto system that is not FIPS, e.g. one based on primitives like Curve25519, achieve FIPS compliance if it is capable of upgrading to FIPS algorithms/implementations in a way that is complete. By complete I mean in the upgraded mode it is using only FIPS compliant crypto and the upgrade occurs in such a way that all the previous security guarantees are re-confirmed using FIPS crypto.
Or would the mere presence of non-FIPS crypto at any stage of the system invalidate it for FIPS certification?