The Go Cryptography State of the Union
summary
Go 1.24 ships a ML-KEM + X25519 hybrid as the default key exchange in crypto/tls (also in SSH 0.38) so connections get post‑quantum protection without extra configuration. A FIPS 140-3 native Go module and optional GOFIPS140 frozen artifact cover algorithm testing across FreeBSD, macOS, Windows and ARM platforms. crypto/rsa avoids math/big for faster keygen, the library rejects RSA keys <1024 bits, AES-CTR is 2–9× faster, crypto/rand uses the Linux VDSO and never fails; Trail of Bits finds no issues in the Go primitives.
AI-written summary · about
chapters (8)
- 0:00Welcome and overview
- 1:11Security track record
- 3:28Post-quantum key exchanges in Go 1.24
- 8:38FIPS 140-3 compliance
- 18:15FIPS 140 side effects
- 21:34Testing and assembly fixes
- 27:07Future TLS and passkeys
- 28:58Geomys update
