What's new in Go's cryptography libraries: Part 3

Go Time: Golang, Software Engineering

The 3 Musketeers return! Filippo Valsorda, Roland Shoemaker & Nicola Murino continue their deep-dive conversation with Natalie about Go’s crypto libraries.

Also listen to Part 1 and Part 2!

Join the discussion

Changelog++ members save 9 minutes on this episode because they made the ads disappear. Join today!

Sponsors:

• FireHydrant – The alerting and on-call tool designed for humans, not systems. Signals puts teams at the center, giving you ultimate control over rules, policies, and schedules. No need to configure your services or do wonky work-arounds. Signals filters out the noise, alerting you only on what matters. Manage coverage requests and on-call notifications effortlessly within Slack. But here’s the game-changer…Signals natively integrates with FireHydrant’s full incident management suite, so as soon as you’re alerted you can seamlessly kickoff and manage your entire incident inside a single platform. Learn more or switch today at firehydrant.com/signals
• Speakeasy – Instantly create SDKs that make API integration easy for your users. Create your first SDK for free! today.
• Ladder Life Insurance – 100% digital — no doctors, no needles, no paperwork. Don’t put it off until the very last minute to get term coverage life insurance through Ladder. Find out if you’re instantly approved. They’re rated A and A plus. Life insurance costs more as you age, now’s the time to cross it off your list.
• Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.

Featuring:

• Filippo Valsorda – Website, GitHub, Mastodon, X
• Roland Shoemaker – Website, GitHub, X
• Nicola Murino – GitHub
• Natalie Pistunovich – GitHub, X

Show Notes:

• What’s new in Go’s cryptography libraries: Part 1
• What’s new in Go’s cryptography libraries: Part 2
• ssh: add AlgorithmNegotiationError
• ssh: validate key type in SSH_MSG_USERAUTH_PK_OK response
• BoGo
• Project Wycheproof
• The Password Game
• Filippo’s open source maintenance policy

Something missing or broken? PRs welcome!

Kapitler

1. It's Go Time! (00:00:00)

2. Sponsor: FireHydrant (00:00:39)

https://firehydrant.com/signals

3. 3 Musketeers (00:03:00)

4. Crypto TLS (00:05:09)

5. Post quantum connections (00:10:05)

6. Metrics (00:12:58)

7. Sponsor: Speakeasy (00:16:27)

https://speakeasyapi.dev/

8. ML Chem (00:20:26)

9. BOGO (00:38:24)

10. The password game (00:49:10)

11. Ad for `govulncheck` (00:53:27)

12. Sponsor: Ladder Life Insurance (00:55:46)

https://ladderlife.com/changelog

13. Nicola's unpop (00:57:31)

14. Filipo's unpop (01:00:46)

15. Roland's unpop (01:03:04)

16. Natalie's unpop (01:04:36)

17. Outro (01:06:51)