What's new in Go's cryptography libraries: Part 1

Go Time: Golang, Software Engineering

Filippo Valsorda & Roland Shoemaker from the Go Team sit down with Natalie to catch us up on what’s new in Go’s crypto libraries. No, not that crypto… good ol’ cryptography! Don’t miss Part 2!

Join the discussion

Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!

Sponsors:

• Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com
• Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.
• Typesense – Lightning fast, globally distributed Search-as-a-Service that runs in memory. You literally can’t get any faster!

Featuring:

• Filippo Valsorda – Website, GitHub, Mastodon, X
• Roland Shoemaker – Website, GitHub, X
• Natalie Pistunovich – GitHub, X

Show Notes:

• What’s new in Go’s cryptography libraries: Part 2
• MultiAlgorithmSigner
• OpenSSH format keys

Something missing or broken? PRs welcome!

บท

1. It's Go Time! (00:00:00)

2. Introducing our guests (00:00:40)

3. Crypto library (00:03:05)

4. RSA backend (00:08:09)

5. Crypto/ecdsa (00:08:52)

6. Crypto/ecdh (00:11:34)

7. How we make changes (00:17:51)

8. Godebugs (00:25:16)

9. TLS cipher suites (00:27:36)

10. RSA cipher suites (00:29:19)

11. Bleichenbacher attacks (00:29:32)

12. X.509 fallback roots (00:37:10)

13. Thinking on the future (00:41:18)

14. Math/rand (00:42:14)

15. AEADs (00:44:54)

16. Post-quantum (00:47:32)

17. Unpopular opinions (00:49:44)

18. Roland's unpop (00:50:21)

19. Filippo's unpop (00:53:56)

20. Natalie's unpop (00:56:29)

21. Outro (00:57:17)