3 ms·
Golang doesn't typically use OpenSSL: there is a BoringCrypto mode which can be enabled, but it's unsupported outside Google [1]. Instead, they have a policy of
by gnfargbl 3y ago
Golang doesn't typically use OpenSSL: there is a BoringCrypto mode which can be enabled, but it's unsupported outside Google [1]. Instead, they have a policy of implementing well-known cryptographic algorithms themselves, in Go.
The author in this case is the lead cryptographic maintainer for Go.
[1] https://go.dev/src/crypto/internal/boring/README https://go.dev/src/crypto/internal/boring/README
- HillRat 3y agoPossibly worth noting for folks that BoringCrypto is necessary if you're having to deal with FIPS certification (which hopefully you don't). There's the usual FFI penalty to using it, so Go-native code is preferred for most use cases.