What's new in Go's cryptography libraries: Part 3
The 3 Musketeers return! Filippo Valsorda, Roland Shoemaker & Nicola Murino continue their deep-dive conversation with Natalie about Go’s crypto libraries.
Also listen to Part 1 and Part 2!
Join the discussion
Changelog++ members save 9 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
FireHydrant – The alerting and on-call tool designed for humans, not systems. Signals puts teams at the center, giving you ultimate control over rules, policies, and schedules. No need to configure your services or do wonky work-arounds. Signals filters out the noise, alerting you only on what matters. Manage coverage requests and on-call notifications effortlessly within Slack. But here’s the game-changer…Signals natively integrates with FireHydrant’s full incident management suite, so as soon as you’re alerted you can seamlessly kickoff and manage your entire incident inside a single platform. Learn more or switch today at firehydrant.com/signals
Speakeasy – Instantly create SDKs that make API integration easy for your users. Create your first SDK for free! today.
Ladder Life Insurance – 100% digital — no doctors, no needles, no paperwork. Don’t put it off until the very last minute to get term coverage life insurance through Ladder. Find out if you’re instantly approved. They’re rated A and A plus. Life insurance costs more as you age, now’s the time to cross it off your list.
Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.
Featuring:
Filippo Valsorda – Website, GitHub, Mastodon, X
Roland Shoemaker – Website, GitHub, X
Nicola Murino – GitHub
Natalie Pistunovich – GitHub, X
Show Notes:
What’s new in Go’s cryptography libraries: Part 1
What’s new in Go’s cryptography libraries: Part 2
ssh: add AlgorithmNegotiationError
ssh: validate key type in SSH_MSG_USERAUTH_PK_OK response
BoGo
Project Wycheproof
The Password Game
Filippo’s open source maintenance policy
Something missing or broken? PRs welcome!
What's new in Go's cryptography libraries: Part 2
Filippo Valsorda & Roland Shoemaker from the Go Team return & bring Nicola Murino with them to continue catching us up on what’s new in Go’s crypto libraries.
This is everything we didn’t cover + deep dives from Part 1!
Join the discussion
Changelog++ members save 3 minutes on this episode because they made the ads disappear. Join today!
Sponsors:
Changelog News – A podcast+newsletter combo that’s brief, entertaining & always on-point. Subscribe today.
Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com
Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.
Featuring:
Filippo Valsorda – Website, GitHub, Mastodon, X
Roland Shoemaker – Website, GitHub, X
Nicola Murino – GitHub
Natalie Pistunovich – GitHub, X
Show Notes:
What’s new in Go’s cryptography libraries: Part 1
NIST
FIPS
Diffie–Hellman key exchange
FIPS standard 140
github.com/quic-go/quic-go
tip.golang.org/src/crypto/tls/quic.go
pkg.go.dev/crypto/x509
MultiAlgorithmSigner
OpenSSH format keys
Kerberos edge case, use the correct token from the client
defer channel window adjustment
Improved test cases (removed t.Fatal calls from goroutines), added test against SSH CLI
Agent compatibility
github.com/drakkan/sftpgo
Something missing or broken? PRs welcome!
What's new in Go's cryptography libraries: Part 1
Filippo Valsorda & Roland Shoemaker from the Go Team sit down with Natalie to catch us up on what’s new in Go’s crypto libraries. No, not that crypto… good ol’ cryptography! Don’t miss Part 2!
Join the discussion
Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!
Sponsors:
Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com
Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.
Typesense – Lightning fast, globally distributed Search-as-a-Service that runs in memory. You literally can’t get any faster!
Featuring:
Filippo Valsorda – Website, GitHub, Mastodon, X
Roland Shoemaker – Website, GitHub, X
Natalie Pistunovich – GitHub, X
Show Notes:
What’s new in Go’s cryptography libraries: Part 2
MultiAlgorithmSigner
OpenSSH format keys
Something missing or broken? PRs welcome!