go-x-crypto, branch v0.50.0

go.mod: update golang.org/x dependencies

2026-04-09T15:33:22Z

Update golang.org/x dependencies to their latest tagged versions. Change-Id: Ia33bd1cd73db091960b285c234d2cf2622f30943 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/764501 LUCI-TryBot-Result: Go LUCI Auto-Submit: Gopher Robot Reviewed-by: David Chase Reviewed-by: Dmitri Shuralyov

ssh: respect signer's algorithm preference in pickSignatureAlgorithm

2026-03-23T15:34:51Z

Previously, pickSignatureAlgorithm constructed the list of candidate algorithms by iterating over the static list returned by algorithmsForKeyFormat. This caused the Signer's preference order to be ignored in favor of the library's default internal order. This change inverts the filtering logic to iterate over the signer's supported algorithms first. This ensures that if a MultiAlgorithmSigner explicitly prefers a specific algorithm (e.g., rsa-sha2-512 over rsa-sha2-256), that preference is preserved and respected during the handshake negotiation. Fixes golang/go#78248 Change-Id: I48a0aac720be7f973963342b82047ce32fc96699 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/746020 Reviewed-by: Lonny Wong Reviewed-by: Dmitri Shuralyov Auto-Submit: Nicola Murino LUCI-TryBot-Result: Go LUCI Reviewed-by: Filippo Valsorda Reviewed-by: Carlos Amedee

ssh: swap cbcMinPaddingSize to cbcMinPacketSize to get encLength

2026-03-20T15:28:06Z

The existing code uses cbcMinPaddingSize incorrectly. That value is also used in the first parameter of the max call, meaning it will never be used. Fixes golang/go#78062 Change-Id: I4243ab668168313919df33d78c6965e9eff0e934 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/754780 Reviewed-by: Roland Shoemaker LUCI-TryBot-Result: Go LUCI Reviewed-by: Carlos Amedee Reviewed-by: Nicola Murino

go.mod: update golang.org/x dependencies

2026-03-11T14:17:49Z

Update golang.org/x dependencies to their latest tagged versions. Change-Id: Ic40aa8385f00dc3d3e3588a0e2555c8039ae6017 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/754160 Reviewed-by: Dmitri Shuralyov Reviewed-by: Cherry Mui Auto-Submit: Gopher Robot LUCI-TryBot-Result: Go LUCI

ssh,acme: clean up tautological/impossible nil conditions

2026-03-10T17:37:09Z

Change-Id: I4c6b4b6d8dc1e8a9d2ebfb8d350b7617d3cf7949 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/739780 Auto-Submit: Neal Patel Reviewed-by: David Chase LUCI-TryBot-Result: Go LUCI Reviewed-by: Nicola Murino

acme: only require prompt if server has terms of service

2026-02-13T17:12:11Z

Fixes golang/go#64881 Change-Id: I2b4415e6f987aab258c26c090ac7b1a465aa1697 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/719001 LUCI-TryBot-Result: Go LUCI Reviewed-by: Junyang Shao Reviewed-by: Dmitri Shuralyov Reviewed-by: Filippo Valsorda

all: upgrade go directive to at least 1.25.0 [generated]

2026-02-11T19:12:56Z

By now Go 1.26.0 has been released, and Go 1.24 is no longer supported per the Go Release Policy (see https://go.dev/doc/devel/release#policy). See go.dev/doc/godebug#go-125 for GODEBUG changes relevant to Go 1.25. For golang/go#69095. [git-generate] (cd . && go get go@1.25.0 && go mod tidy) (cd x509roots/fallback && go get go@1.25.0 && go mod tidy) Change-Id: I8df6bf58a117a2f92bb08f787e520aa9446dab46 Reviewed-on: https://go-review.googlesource.com/c/crypto/+/744680 Reviewed-by: Junyang Shao LUCI-TryBot-Result: Go LUCI Auto-Submit: Gopher Robot Reviewed-by: Michael Pratt

x509roots/fallback: update bundle

2026-02-09T21:49:22Z

This is an automated CL which updates the NSS root bundle. [git-generate] go generate ./x509roots Change-Id: I3665d29edabaef0efb634031b2b7d20d32774eec Reviewed-on: https://go-review.googlesource.com/c/crypto/+/743540 Reviewed-by: Dmitri Shuralyov Auto-Submit: Gopher Robot LUCI-TryBot-Result: Go LUCI Reviewed-by: Roland Shoemaker

go.mod: update golang.org/x dependencies

2026-02-09T16:37:10Z

Update golang.org/x dependencies to their latest tagged versions. Change-Id: I1b283104f6d4557ee12c256bbadfccb3cd5548be Reviewed-on: https://go-review.googlesource.com/c/crypto/+/743362 Reviewed-by: Dmitri Shuralyov Reviewed-by: Cherry Mui LUCI-TryBot-Result: Go LUCI Auto-Submit: Gopher Robot

scrypt: fix panic on parameters <= 0

2026-01-13T15:44:11Z

Providing 0 as argument for r or p results in a panic: panic: runtime error: integer divide by zero Providing negative values for r or p returns a misleading error: scrypt: parameters are too large This change avoids the panic and introduces a new error that is returned when r or p are <= 0: scrypt: parameters must be > 0 Change-Id: I68987b27d1eedd66644d2ec9436cba364fc1d46d Reviewed-on: https://go-review.googlesource.com/c/crypto/+/731780 Reviewed-by: Michael Pratt Reviewed-by: Roland Shoemaker LUCI-TryBot-Result: Go LUCI Reviewed-by: Filippo Valsorda Auto-Submit: Roland Shoemaker