Golang has its own native crypto implementations where possible. Having used openssl extensively and having read some of its source code[1], I would personally

Golang has its own native crypto implementations where possible. Having used openssl extensively and having read some of its source code[1], I would personally like good alternatives. The developer (Filippo Valsorda) is a cryptographer and Go maintainer (incl. of some well known Go crypto packages in its std lib). In this particular instance he seems to have implemented this (ML-KEM-768) as an exercise (incl. educational), but still, just some context! [1] openssl is a gift that keeps on giving (CVEs). Just look at all those nice (incl. recent) issues, incl. RCEs iirc. Also, very anecdotal, but I find it funny that they haven't updated this page for the last I don't know 15 years? https://wiki.openssl.org/index.php/Code_Quality https://wiki.openssl.org/index.php/Code_Quality