go-x-crypto, branch main

Merge remote-tracking branch 'up/master'

2026-04-14T18:14:04Z

x509roots/fallback: update bundle

2026-04-13T17:03:23Z

This is an automated CL which updates the NSS root bundle. [git-generate] go generate ./x509roots Change-Id: I9bad7b49959a336a125bdc3aa340c94292b26899 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/766500 LUCI-TryBot-Result: golang-scoped@luci-project-accounts.iam.gserviceaccount.com Reviewed-by: Dmitri Shuralyov Auto-Submit: Gopher Robot Reviewed-by: Roland Shoemaker

go.mod: update golang.org/x dependencies

2026-04-09T15:33:22Z

Update golang.org/x dependencies to their latest tagged versions. Change-Id: Ia33bd1cd73db091960b285c234d2cf2622f30943 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/764501 LUCI-TryBot-Result: Go LUCI Auto-Submit: Gopher Robot Reviewed-by: David Chase Reviewed-by: Dmitri Shuralyov

ssh/knownhosts: implements DB interface

2026-03-26T23:10:04Z

There is an issue with current SSH client implementation. Given a single host public key in the known_hosts file, host ssh-ed25519 key... Calling ssh.Dial(`tcp`, "host", ...) will return an error knownhosts: key mismatch from [handshakeTransport.enterKeyExchange], because only key "mlkem768x25519-sha256" is checked on the client side. This changes add DB interface for knownhosts that have two methods: - HostKeyAlgorithms: return the host key that matches in known_hosts based on the "host" name or address for [ssh.ClientConfig.HostKeyAlgorithms]. - HostKeyCallback: return the ssh.HostKeyCallback for [ssh.ClientConfig.HostKeyCallback]. Author: Faye Salwin Reference: https://go-review.googlesource.com/c/crypto/+/154458

all: add makefile for common tasks

2026-03-26T19:56:30Z

Change-Id: Ie26c0a39f9160a0a2c246d0c95ac16d159c9e750

ssh: implement Session Run with context

2026-03-26T19:56:30Z

The RunWithContext similar to Run but terminate the remote command with SIGKILL when its receive context cancellation.

ssh: implement method Is in PassphraseMissingError

2026-03-26T19:56:30Z

The Is method allow the returned error checked using errors.Is againts PassphraseMissingError.

ssh: respect signer's algorithm preference in pickSignatureAlgorithm

2026-03-23T15:34:51Z

Previously, pickSignatureAlgorithm constructed the list of candidate algorithms by iterating over the static list returned by algorithmsForKeyFormat. This caused the Signer's preference order to be ignored in favor of the library's default internal order. This change inverts the filtering logic to iterate over the signer's supported algorithms first. This ensures that if a MultiAlgorithmSigner explicitly prefers a specific algorithm (e.g., rsa-sha2-512 over rsa-sha2-256), that preference is preserved and respected during the handshake negotiation. Fixes golang/go#78248 Change-Id: I48a0aac720be7f973963342b82047ce32fc96699 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/746020 Reviewed-by: Lonny Wong Reviewed-by: Dmitri Shuralyov Auto-Submit: Nicola Murino LUCI-TryBot-Result: Go LUCI Reviewed-by: Filippo Valsorda Reviewed-by: Carlos Amedee

ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength

2026-03-20T15:28:06Z

The existing code uses cbcMinPaddingSize incorrectly. That value is also used in the first parameter of the max call, meaning it will never be used. Fixes golang/go#78062 Change-Id: I4243ab668168313919df33d78c6965e9eff0e934 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/754780 Reviewed-by: Roland Shoemaker LUCI-TryBot-Result: Go LUCI Reviewed-by: Carlos Amedee Reviewed-by: Nicola Murino

go.mod: update golang.org/x dependencies

2026-03-11T14:17:49Z

Update golang.org/x dependencies to their latest tagged versions. Change-Id: Ic40aa8385f00dc3d3e3588a0e2555c8039ae6017 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/754160 Reviewed-by: Dmitri Shuralyov Reviewed-by: Cherry Mui Auto-Submit: Gopher Robot LUCI-TryBot-Result: Go LUCI