From: Filippo Valsorda Date: Mon, 17 Jun 2019 22:28:27 +0000 (-0400) Subject: doc/go1.13: add crypto-related release notes X-Git-Tag: go1.13beta1~56 X-Git-Url: http://www.git.cypherpunks.su/?a=commitdiff_plain;h=c82e7e7a88aff4278a4816c35ae5354d984a24ac;p=gostls13.git doc/go1.13: add crypto-related release notes Change-Id: I05d4ff3d3a31f56c9ceebdaceb39535a1351b26a Reviewed-on: https://go-review.googlesource.com/c/go/+/182701 Reviewed-by: Andrew Bonventre --- diff --git a/doc/go1.13.html b/doc/go1.13.html index 3f9251df1d..0e3f9f915c 100644 --- a/doc/go1.13.html +++ b/doc/go1.13.html @@ -149,9 +149,27 @@ TODO generally

TLS 1.3

-TODO; link to Go 1.12 notes. + As announced in Go 1.12, Go 1.13 enables support for TLS 1.3 in the + crypto/tls package by default. It can be disabled by adding the + value tls13=0 to the GODEBUG + environment variable. The opt-out will be removed in Go 1.14.

+

+ See the Go 1.12 release notes for important + compatibility information. +

+ +

crypto/ed25519

+ +

+ The new crypto/ed25519 + package implements the Ed25519 signature + scheme. This functionality was previously provided by the + golang.org/x/crypto/ed25519 + package, which becomes a wrapper for + crypto/ed25519 when used with Go 1.13+. +

Minor changes to the library

@@ -193,21 +211,25 @@ TODO -
crypto/ed25519
+
crypto/tls
-

- TODO: https://golang.org/cl/174945: promote from golang.org/x/crypto/ed25519 +

+ Ed25519 certificates are now supported in TLS versions 1.2 and 1.3.

-
+
-
crypto/tls
+
crypto/x509
-

- TODO: https://golang.org/cl/177698: add support for Ed25519 certificates in TLS 1.2 and 1.3 +

+ Ed25519 keys are now supported in certificates and certificate requests + according to RFC 8410, as well as by the + ParsePKCS8PrivateKey, + MarshalPKCS8PrivateKey, + and ParsePKIXPublicKey functions.

-
+
database/sql
@@ -266,7 +288,12 @@ TODO
math/bits

- TODO: https://golang.org/cl/178177: document that Add, Sub, Mul, RotateLeft, ReverseBytes are constant time + The execution time of Add, + Sub, + Mul, + RotateLeft, and + ReverseBytes is now + guaranteed to be independent of the inputs.