4 ms·

Thank goodness. I am kind of sick of the constant churn in the crypto package. I get that you want to keep up to date with security, but the entire crypto tree

by 38 2y ago

Thank goodness. I am kind of sick of the constant churn in the crypto package. I get that you want to keep up to date with security, but the entire crypto tree is basically a playground for Filippo Valsorda at this point. Meanwhile stuff that I actually need like CMAC is "won't fix"

tptacek 2y ago
What's another language with a stdlib that includes CMAC?
- rdpintqogeogsaa 2y ago
  Zig[1]. [1] https://ziglang.org/documentation/0.11.0/std/#A;std:crypto.auth.cmac https://ziglang.org/documentation/0.11.0/std/#A;std:crypto.a...
- ramchip 2y ago
  Erlang / Elixir
  - tptacek 2y ago
    Link? Does Elixir even have cryptography in the stdlib?
    - petronio 2y ago
      https://www.erlang.org/doc/apps/crypto/crypto https://www.erlang.org/doc/apps/crypto/crypto Elixir can call Erlang/OTP modules directly, so they also have access to that same module. Erlang/OTP is a hard dependency for Elixir afaik.
      - tptacek 2y ago
        Gotcha, thanks!
- 38 2y ago
  [flagged]
kbolino 2y ago
What churn does the crypto package get? It's part of the standard library and so bound by the compatibility promise, which basically freezes existing things in place.
- 38 2y ago
  see for yourself https://github.com/golang/go/commits/master/src/crypto https://github.com/golang/go/commits/master/src/crypto
  - arccy 2y ago
    so pretty stable, and you're mad that other people won't do free work for you to implement a mostly unused spec.
    - 38 2y ago
      [flagged]
    - sevg 2y ago
      There's a lot of this kind of entitlement around. Trash other peoples' work as "playground" activity, and demand they work on something else for free.
  - kbolino 2y ago
    Churn implies upheaval, breaking things that used to (and ought to) work. I don't see examples of that from the first few commits I examined.