What's new in Go's cryptography libraries: Part 1 (Go Time #295)
Nov 1, 2023
auto_awesome
Filippo Valsorda & Roland Shoemaker from the Go Team talk about what's new in Go's crypto libraries. Topics include Godabags, RSA cipher suites, debug flags, the great text editor debate, controversy around NIST elliptic curves, and expressing unpopular opinions.
The NIST elliptic curves are now considered secure and reliable for use in cryptography.
Exciting developments in cryptography libraries include improvements to math/rand package and higher-level APIs for post-quantum algorithms.
Deep dives
The Best Terminal Text Editor
There is an ongoing debate among software engineers regarding the best terminal text editor, with Emacs and Vim being the popular contenders. However, I believe that Pico is the best text editor due to its lightweight nature, user-friendly interface, and availability on most systems.
The NIST Elliptic Curves
Contrary to popular belief, the NIST elliptic curves are actually great and secure. They had some formula issues in the past, but those have been resolved, and the curves are now safe to use. They are prime order curves generated from a hash, and while the exact details are not known, they have proven to be secure and reliable.
Condemning Taking Hostages
Taking hostages, especially babies and children, should not be associated with any political opinion and should be condemned by everyone. It is a deeply immoral act that should be universally recognized as wrong and inhumane.
Upcoming Changes in Cryptography Libraries
Exciting developments are happening in cryptography libraries, such as the upcoming V2 of math/rand package and higher-level APIs for post-quantum algorithms. These improvements aim to simplify usage, make secure choices by default, and address emerging security concerns.
Filippo Valsorda & Roland Shoemaker from the Go Team sit down with Natalie to catch us up on what’s new in Go’s crypto libraries. No, not that crypto… good ol’ cryptography! Don’t miss Part 2!
Changelog++ members support our work, get closer to the metal, and make the ads disappear. Join today!
Sponsors:
Fastly – Our bandwidth partner. Fastly powers fast, secure, and scalable digital experiences. Move beyond your content delivery network to their powerful edge cloud platform. Learn more at fastly.com
Fly.io – The home of Changelog.com — Deploy your apps and databases close to your users. In minutes you can run your Ruby, Go, Node, Deno, Python, or Elixir app (and databases!) all over the world. No ops required. Learn more at fly.io/changelog and check out the speedrun in their docs.
Typesense – Lightning fast, globally distributed Search-as-a-Service that runs in memory. You literally can’t get any faster!