go-x-crypto, branch v0.49.0

go.mod: update golang.org/x dependencies

2026-03-11T14:17:49Z

Update golang.org/x dependencies to their latest tagged versions. Change-Id: Ic40aa8385f00dc3d3e3588a0e2555c8039ae6017 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/754160 Reviewed-by: Dmitri Shuralyov Reviewed-by: Cherry Mui Auto-Submit: Gopher Robot LUCI-TryBot-Result: Go LUCI

ssh,acme: clean up tautological/impossible nil conditions

2026-03-10T17:37:09Z

Change-Id: I4c6b4b6d8dc1e8a9d2ebfb8d350b7617d3cf7949 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/739780 Auto-Submit: Neal Patel Reviewed-by: David Chase LUCI-TryBot-Result: Go LUCI Reviewed-by: Nicola Murino

acme: only require prompt if server has terms of service

2026-02-13T17:12:11Z

Fixes golang/go#64881 Change-Id: I2b4415e6f987aab258c26c090ac7b1a465aa1697 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/719001 LUCI-TryBot-Result: Go LUCI Reviewed-by: Junyang Shao Reviewed-by: Dmitri Shuralyov Reviewed-by: Filippo Valsorda

all: upgrade go directive to at least 1.25.0 [generated]

2026-02-11T19:12:56Z

By now Go 1.26.0 has been released, and Go 1.24 is no longer supported per the Go Release Policy (see https://go.dev/doc/devel/release#policy). See go.dev/doc/godebug#go-125 for GODEBUG changes relevant to Go 1.25. For golang/go#69095. [git-generate] (cd . && go get go@1.25.0 && go mod tidy) (cd x509roots/fallback && go get go@1.25.0 && go mod tidy) Change-Id: I8df6bf58a117a2f92bb08f787e520aa9446dab46 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/744680 Reviewed-by: Junyang Shao LUCI-TryBot-Result: Go LUCI Auto-Submit: Gopher Robot Reviewed-by: Michael Pratt

x509roots/fallback: update bundle

2026-02-09T21:49:22Z

This is an automated CL which updates the NSS root bundle. [git-generate] go generate ./x509roots Change-Id: I3665d29edabaef0efb634031b2b7d20d32774eec Reviewed-on: https://go-review.googlesource.com/c/crypto/+/743540 Reviewed-by: Dmitri Shuralyov Auto-Submit: Gopher Robot LUCI-TryBot-Result: Go LUCI Reviewed-by: Roland Shoemaker

go.mod: update golang.org/x dependencies

2026-02-09T16:37:10Z

Update golang.org/x dependencies to their latest tagged versions. Change-Id: I1b283104f6d4557ee12c256bbadfccb3cd5548be Reviewed-on: https://go-review.googlesource.com/c/crypto/+/743362 Reviewed-by: Dmitri Shuralyov Reviewed-by: Cherry Mui LUCI-TryBot-Result: Go LUCI Auto-Submit: Gopher Robot

scrypt: fix panic on parameters <= 0

2026-01-13T15:44:11Z

Providing 0 as argument for r or p results in a panic: panic: runtime error: integer divide by zero Providing negative values for r or p returns a misleading error: scrypt: parameters are too large This change avoids the panic and introduces a new error that is returned when r or p are <= 0: scrypt: parameters must be > 0 Change-Id: I68987b27d1eedd66644d2ec9436cba364fc1d46d Reviewed-on: https://go-review.googlesource.com/c/crypto/+/731780 Reviewed-by: Michael Pratt Reviewed-by: Roland Shoemaker LUCI-TryBot-Result: Go LUCI Reviewed-by: Filippo Valsorda Auto-Submit: Roland Shoemaker

go.mod: update golang.org/x dependencies

2026-01-12T15:56:02Z

Update golang.org/x dependencies to their latest tagged versions. Change-Id: I47041f06d6a0c92919eaac5d727cbc41551ed2e1 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/734461 Auto-Submit: Gopher Robot Reviewed-by: Dmitri Shuralyov LUCI-TryBot-Result: Go LUCI Reviewed-by: Cherry Mui

chacha20poly1305: error out in fips140=only mode

2025-12-10T14:07:36Z

We don't guarantee fips140=only support in x/crypto, but chacha20poly1305 is special in that it's vendored into the standard library. We could wrap all the callsites, but it's more robust to just error out at construction time. Change-Id: I4b1e451bd250429c4c5c5b61c8b2141c6a6a6964 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/728480 Reviewed-by: Roland Shoemaker LUCI-TryBot-Result: Go LUCI Reviewed-by: David Chase Auto-Submit: Filippo Valsorda

go.mod: update golang.org/x dependencies

2025-12-08T18:34:26Z

Update golang.org/x dependencies to their latest tagged versions. Change-Id: I81158fb078bccce57d8d46cac0cb87e6c4f8cff9 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/728181 Reviewed-by: Dmitri Shuralyov Reviewed-by: David Chase Auto-Submit: Gopher Robot LUCI-TryBot-Result: Go LUCI