Hacker News Reader

Thank goodness. I am kind of sick of the constant churn in the crypto package.

I get that you want to keep up to date with security, but the entire crypto tree is basically a playground for Filippo Valsorda at this point. Meanwhile stuff that I actually need like CMAC is "won't fix"

View on HN

What churn does the crypto package get? It's part of the standard library and so bound by the compatibility promise, which basically freezes existing things in place.

see for yourself

https://github.com/golang/go/commits/master/src/crypto

Churn implies upheaval, breaking things that used to (and ought to) work. I don't see examples of that from the first few commits I examined.

so pretty stable, and you're mad that other people won't do free work for you to implement a mostly unused spec.

There's a lot of this kind of entitlement around.

Trash other peoples' work as "playground" activity, and demand they work on something else for free.

What's another language with a stdlib that includes CMAC?

Zig[1].

[1] https://ziglang.org/documentation/0.11.0/std/#A;std:crypto.a...

Erlang / Elixir

Link? Does Elixir even have cryptography in the stdlib?

https://www.erlang.org/doc/apps/crypto/crypto

Elixir can call Erlang/OTP modules directly, so they also have access to that same module. Erlang/OTP is a hard dependency for Elixir afaik.

Gotcha, thanks!

Reply on news.ycombinator.com