"The Cryptography State of the Union"
summary
Recent work lists concrete changes and results: a new crypto/ecdh byte-oriented API replaces the error-prone X/Y surface, TLS 1.0/1.1 are disabled by default and cipher ordering is auto-picked, QUIC hook APIs land for go1.21, X.509 gets a new parser and certificate cache using set finalizers, large rewrites move away from math/big to a 400-line constant-time bigmod and Fiat-generated curve code from Fiat Crypto, 1770 lines of hand asm are removed and some routines show 15–70% performance shifts.
AI-written summary · about
chapters (17)
- 0:00Crypto standard library intro
- 1:51Deprecating crypto/elliptic API
- 5:48New crypto/ecdh package
- 8:17math/big out of security perimeter
- 13:19Stack allocation for performance
- 14:48Risk mitigation for crypto assembly
- 16:59Removing Curve25519 assembly
- 17:19TLS improvements in Go 1.20
- 20:34QUIC support in crypto/tls
- 21:17SHA-1/MD5 deprecation in x509
- 23:46Embedding root certs in Go binaries
- 25:11Crypto library update goals
- 27:40Future of crypto/rand and Go 2
- 28:43Post-quantum cryptography and Kyber
- 29:23Formal crypto verification
- 30:08Open source maintainer model
- 33:00Conclusion
related talks
29mThe Go Cryptography State of the Union
37mFrontiers in Cryptography
58mKeynote: Crypto means Cryptography!
58mLet's Go Quantum
28mModernizing Kernel Cryptography: From Complex APIs To Streamlined Libraries
58mModern, Functional Cryptography (Part 6)
52mMore Secrets of Cryptography
24mTaking the (Quantum) Leap with Go