Hacker News Reader

Comment by candiddevmike | Hacker News Reader

FWIW Go doesn't have an implementation of XAES in the stdlib yet, there's only the reference implementation in C2SP.

Thank goodness. I am kind of sick of the constant churn in the crypto package.

I get that you want to keep up to date with security, but the entire crypto tree is basically a playground for Filippo Valsorda at this point. Meanwhile stuff that I actually need like CMAC is "won't fix"

What's another language with a stdlib that includes CMAC?

Zig[1].

[1] https://ziglang.org/documentation/0.11.0/std/#A;std:crypto.a...

Erlang / Elixir

Link? Does Elixir even have cryptography in the stdlib?

https://www.erlang.org/doc/apps/crypto/crypto

Elixir can call Erlang/OTP modules directly, so they also have access to that same module. Erlang/OTP is a hard dependency for Elixir afaik.

Gotcha, thanks!

What churn does the crypto package get? It's part of the standard library and so bound by the compatibility promise, which basically freezes existing things in place.

see for yourself

https://github.com/golang/go/commits/master/src/crypto

so pretty stable, and you're mad that other people won't do free work for you to implement a mostly unused spec.

There's a lot of this kind of entitlement around.

Trash other peoples' work as "playground" activity, and demand they work on something else for free.

Churn implies upheaval, breaking things that used to (and ought to) work. I don't see examples of that from the first few commits I examined.

Reply on news.ycombinator.com