The pages are generated with Goldsv0.8.4. (GOOS=linux GOARCH=amd64)
Golds is a Go 101 project developed by Tapir Liu.
diff --git a/imp/crypto/internal/rand.reader^3d094.html b/imp/crypto/internal/rand.reader^3d094.html
index ab857b7c55b..a2f3612ec4d 100644
--- a/imp/crypto/internal/rand.reader^3d094.html
+++ b/imp/crypto/internal/rand.reader^3d094.html
@@ -15,7 +15,7 @@
The pages are generated with Goldsv0.8.4. (GOOS=linux GOARCH=amd64)
Golds is a Go 101 project developed by Tapir Liu.
diff --git a/imp/encoding/binary.bigEndian^1e7dc.html b/imp/encoding/binary.bigEndian^1e7dc.html
index 13a1ff8c046..4af30bb7223 100644
--- a/imp/encoding/binary.bigEndian^1e7dc.html
+++ b/imp/encoding/binary.bigEndian^1e7dc.html
@@ -36,12 +36,12 @@
bigEndian.M : ByteOrder.Uint16
The pages are generated with Goldsv0.8.4. (GOOS=linux GOARCH=amd64)
Golds is a Go 101 project developed by Tapir Liu.
diff --git a/imp/encoding/binary.littleEndian^40d0b.html b/imp/encoding/binary.littleEndian^40d0b.html
index 55560e819de..e316b683e29 100644
--- a/imp/encoding/binary.littleEndian^40d0b.html
+++ b/imp/encoding/binary.littleEndian^40d0b.html
@@ -36,12 +36,12 @@
littleEndian.M : ByteOrder.Uint16
The pages are generated with Goldsv0.8.4. (GOOS=linux GOARCH=amd64)
Golds is a Go 101 project developed by Tapir Liu.
diff --git a/imp/encoding/binary.nativeEndian^61760.html b/imp/encoding/binary.nativeEndian^61760.html
index 23603265eb6..188cc3fbe3f 100644
--- a/imp/encoding/binary.nativeEndian^61760.html
+++ b/imp/encoding/binary.nativeEndian^61760.html
@@ -36,12 +36,12 @@
nativeEndian.M : ByteOrder.Uint16
The pages are generated with Goldsv0.8.4. (GOOS=linux GOARCH=amd64)
Golds is a Go 101 project developed by Tapir Liu.
diff --git a/imp/github.com/go-faster/errors.Wrapper.html b/imp/github.com/go-faster/errors.Wrapper.html
index b323cfbf8cb..91f24735473 100644
--- a/imp/github.com/go-faster/errors.Wrapper.html
+++ b/imp/github.com/go-faster/errors.Wrapper.html
@@ -14,7 +14,7 @@
The pages are generated with Goldsv0.8.4. (GOOS=linux GOARCH=amd64)
+Golds is a Go 101 project developed by Tapir Liu.
+PR and bug reports are welcome and can be submitted to the issue list.
+Please follow @zigo_101 (reachable from the left QR code) to get the latest news of Golds.
\ No newline at end of file
diff --git a/imp/github.com/gotd/td/exchange.reqOrDH^149af.html b/imp/github.com/gotd/td/exchange.reqOrDH^149af.html
index 042c9f45844..61927b8fec9 100644
--- a/imp/github.com/gotd/td/exchange.reqOrDH^149af.html
+++ b/imp/github.com/gotd/td/exchange.reqOrDH^149af.html
@@ -8,7 +8,7 @@
The pages are generated with Goldsv0.8.4. (GOOS=linux GOARCH=amd64)
Golds is a Go 101 project developed by Tapir Liu.
diff --git a/imp/golang.org/x/sys/cpu.byteOrder^5f5cc.html b/imp/golang.org/x/sys/cpu.byteOrder^5f5cc.html
index e6910579c58..b2b72e526ad 100644
--- a/imp/golang.org/x/sys/cpu.byteOrder^5f5cc.html
+++ b/imp/golang.org/x/sys/cpu.byteOrder^5f5cc.html
@@ -20,7 +20,7 @@
encoding/binary.littleEndian.Uint32
encoding/binary.nativeEndian.littleEndian.Uint32
vendor/golang.org/x/sys/cpu.bigEndian.Uint32
- vendor/golang.org/x/sys/cpu.byteOrder.Uint32
+ vendor/golang.org/x/sys/cpu.byteOrder.Uint32
vendor/golang.org/x/sys/cpu.littleEndian.Uint32
The pages are generated with Goldsv0.8.4. (GOOS=linux GOARCH=amd64)
Golds is a Go 101 project developed by Tapir Liu.
diff --git a/imp/vendor/golang.org/x/sys/cpu.bigEndian^1e7dc.html b/imp/vendor/golang.org/x/sys/cpu.bigEndian^1e7dc.html
index 162e24dc8ba..aa94ed5b51a 100644
--- a/imp/vendor/golang.org/x/sys/cpu.bigEndian^1e7dc.html
+++ b/imp/vendor/golang.org/x/sys/cpu.bigEndian^1e7dc.html
@@ -13,11 +13,11 @@
Method Implmentations
The pages are generated with Goldsv0.8.4. (GOOS=linux GOARCH=amd64)
Golds is a Go 101 project developed by Tapir Liu.
diff --git a/imp/vendor/golang.org/x/sys/cpu.byteOrder^5f5cc.html b/imp/vendor/golang.org/x/sys/cpu.byteOrder^5f5cc.html
index 4b818e48ebc..a2c3e57e48a 100644
--- a/imp/vendor/golang.org/x/sys/cpu.byteOrder^5f5cc.html
+++ b/imp/vendor/golang.org/x/sys/cpu.byteOrder^5f5cc.html
@@ -20,7 +20,7 @@
encoding/binary.littleEndian.Uint32
encoding/binary.nativeEndian.littleEndian.Uint32
golang.org/x/sys/cpu.bigEndian.Uint32
- golang.org/x/sys/cpu.byteOrder.Uint32
+ golang.org/x/sys/cpu.byteOrder.Uint32
golang.org/x/sys/cpu.littleEndian.Uint32
The pages are generated with Goldsv0.8.4. (GOOS=linux GOARCH=amd64)
Golds is a Go 101 project developed by Tapir Liu.
diff --git a/index.html b/index.html
index 29713479d77..dcdfbd5a71d 100644
--- a/index.html
+++ b/index.html
@@ -13,16 +13,16 @@
Statistics (detailed ones)
Total 304 packages analyzed and 4743 Go files
- (1577143 lines of code) parsed. On average,
+ (1577182 lines of code) parsed. On average,
* each Go source file imports 7.18 packages
and contains 333 lines of code.
* each package depends on 6.68 other packages,
contains 15.90 source code files, and exports
- - 18.74 type names,
+ - 18.75 type names,
- 4.32 variables,
- 27.35 constants,
- 13.55 functions.
-
All Packages (sort packages by: | | | )
3
1. bufio (14) (1269) (10) (4) - implements buffered I/O. It wraps an io.Reader or io.Writer object, creating another object (Reader or Writer) that also implements the interface but provides buffering and some help for textual I/O.
9. context (31) (806) (11) (2) - defines the Context type, which carries deadlines, cancellation signals, and other request-scoped values across API boundaries and between processes.
11. crypto/aes (9) (48) (19) (3) - implements AES encryption (formerly Rijndael), as defined in U.S. Federal Information Processing Standards Publication 197.
3
12. crypto/cipher (17) (1040) (17) (3) - implements standard block cipher modes that can be wrapped around low-level block cipher implementations.
3
13. crypto/des (3) (556) (18) (4) - implements the Data Encryption Standard (DES) and the Triple Data Encryption Algorithm (TDEA) as defined in U.S. Federal Information Processing Standards Publication 46-3.
3
14. crypto/dsa (1) (330) (20) (4) - implements the Digital Signature Algorithm, as defined in FIPS 186-3.
3
15. crypto/ecdh (6) (551) (20) (4) - implements Elliptic Curve Diffie-Hellman over NIST curves and Curve25519.
3
16. crypto/ecdsa (3) (868) (21) (4) - implements the Elliptic Curve Digital Signature Algorithm, as defined in [FIPS 186-5].
18. crypto/elliptic (4) (884) (16) (4) - implements the standard NIST P-224, P-256, P-384, and P-521 elliptic curves over prime fields.
3
19. crypto/fips140 (6) (93) (14) (4) - provides information about the FIPS 140-3 Go Cryptographic Module and FIPS 140-3 mode.
3
20. crypto/hkdf (4) (84) (17) (5) - implements the HMAC-based Extract-and-Expand Key Derivation Function (HKDF) as defined in RFC 5869.
3
21. crypto/hmac (5) (65) (19) (5) - implements the Keyed-Hash Message Authentication Code (HMAC) as defined in U.S. Federal Information Processing Standards Publication 198.
3
22. crypto/hpke (1) (1482) (21) (5) - implements Hybrid Public Key Encryption (HPKE) as defined in [RFC 9180].
25. crypto/internal/boring/sig (1) (17) (1) (4) - holds “code signatures” that can be called and will result in certain code sequences being linked into the final binary.
42. crypto/internal/fips140/mlkem (1) (1573) (16) (6) - implements the quantum-resistant key encapsulation method ML-KEM (formerly known as Kyber), as specified in [NIST FIPS 203].
47. crypto/internal/fips140/sha256 (9) (440) (11) (4) - implements the SHA-224 and SHA-256 hash algorithms as defined in FIPS 180-4.
3
48. crypto/internal/fips140/sha3 (6) (933) (11) (4) - implements the SHA-3 fixed-output-length hash functions and the SHAKE variable-output-length functions defined by [FIPS 202], as well as the cSHAKE extendable-output-length functions defined by [SP 800-185].
3
49. crypto/internal/fips140/sha512 (7) (515) (11) (4) - implements the SHA-384, SHA-512, SHA-512/224, and SHA-512/256 hash algorithms as defined in FIPS 180-4.
52. crypto/internal/fips140/tls13 (1) (215) (15) (5) - implements the TLS 1.3 Key Schedule as specified in RFC 8446, Section 7.1 and allowed by FIPS 140-3 IG 2.4.B Resolution 7.
3
53. crypto/internal/fips140cache (2) (52) (7) (5) - provides a weak map that associates the lifetime of values with the lifetime of keys.
60. crypto/internal/impl (6) (107) (10) (4) - is a registry of alternative implementations of cryptographic primitives, to allow selecting them for testing.
62. crypto/internal/randutil (1) (26) (9) (4) - contains internal randomness utilities for various crypto packages.
3
63. crypto/internal/sysrand (1) (144) (14) (5) - rand provides cryptographically secure random bytes from the operating system.
3
64. crypto/md5 (4) (347) (17) (4) - implements the MD5 hash algorithm as defined in RFC 1321.
3
65. crypto/mlkem (3) (221) (17) (5) - implements the quantum-resistant key encapsulation method ML-KEM (formerly known as Kyber), as specified in [NIST FIPS 203].
3
66. crypto/pbkdf2 (1) (54) (17) (5) - implements the key derivation function PBKDF2 as defined in RFC 8018 (PKCS #5 v2.1).
3
67. crypto/rand (11) (198) (20) (3) - implements a cryptographically secure random number generator.
3
68. crypto/rc4 (2) (83) (17) (5) - implements RC4 encryption, as defined in Bruce Schneier's Applied Cryptography.
3
69. crypto/rsa (7) (1441) (21) (2) - implements RSA encryption as specified in PKCS #1 and RFC 8017.
3
70. crypto/sha1 (6) (413) (19) (3) - implements the SHA-1 hash algorithm as defined in RFC 3174.
3
71. crypto/sha256 (8) (74) (19) (3) - implements the SHA224 and SHA256 hash algorithms as defined in FIPS 180-4.
3
72. crypto/sha3 (3) (274) (12) (4) - implements the SHA-3 hash algorithms and the SHAKE extendable output functions defined in FIPS 202.
3
73. crypto/sha512 (7) (123) (19) (4) - implements the SHA-384, SHA-512, SHA-512/224, and SHA-512/256 hash algorithms as defined in FIPS 180-4.
3
74. crypto/subtle (11) (134) (4) (3) - implements functions that are often useful in cryptographic code but require careful thought to use correctly.
3
75. crypto/tls (2) (14413) (23) (4) - partially implements TLS 1.2, as specified in RFC 5246, and TLS 1.3, as specified in RFC 8446.
77. crypto/x509 (3) (7765) (22) (3) - implements a subset of the X.509 standard.
3
78. crypto/x509/pkix (1) (320) (17) (4) - contains shared, low level structures used for ASN.1 parsing and serialization of X.509 certificates, CRL and OCSP.
3
79. embed (1) (436) (12) (3) - provides access to files embedded in the running Go program.
3
80. encoding (1) (78) (1) (4) - defines interfaces shared by other packages that convert data to and from byte-level and textual representations.
3
81. encoding/asn1 (4) (2107) (16) (4) - implements parsing of DER-encoded ASN.1 data structures, as defined in ITU-T Rec X.690.
3
82. encoding/base64 (14) (665) (9) (3) - implements base64 encoding as specified by RFC 4648.
3
83. encoding/binary (32) (1214) (10) (3) - implements simple translation between numbers and byte sequences and encoding and decoding of varints.
92. github.com/cespare/xxhash/v2 (1) (316) (11) (3) - implements the 64-bit variant of xxHash (XXH64) as described at http://cyan4973.github.io/xxHash/.
101. github.com/gotd/log (8) (421) (15) (1) - defines a minimal, dependency-free logging port for gotd libraries.
3
102. github.com/gotd/neo (1) (538) (15) (2) - implements side effects simulation for testing.
3
103. github.com/gotd/td/ascii (1) (19) (1) (2) - provides data and functions to test some properties of ASCII code points.
3
104. github.com/gotd/td/bin (17) (742) (16) (1) - implements binary serialization and deserialization for TL, providing Buffer that can decode and encode basic Type Language types.
144. github.com/klauspost/compress/gzip (1) (670) (17) (2) - implements reading and writing of gzip format compressed files, as specified in RFC 1952.
3
145. github.com/klauspost/compress/huff0 (1) (2788) (16) (6) - This file contains the specialisation of Decoder.Decompress4X and Decoder.Decompress1X that use an asm implementation of thir main loops.
151. github.com/refraction-networking/utls (1) (25388) (28) (4) - partially implements TLS 1.2, as specified in RFC 5246, and TLS 1.3, as specified in RFC 8446.
178. go.uber.org/atomic (3) (1716) (16) (1) - provides simple wrappers around numerics to enforce atomic access.
3
179. go.uber.org/multierr (9) (694) (15) (1) - allows combining one or more errors together.
3
180. golang.org/x/crypto/chacha20 (1) (453) (18) (6) - implements the ChaCha20 and XChaCha20 encryption algorithms as specified in RFC 8439 and draft-irtf-cfrg-xchacha-01.
3
181. golang.org/x/crypto/chacha20poly1305 (2) (380) (19) (5) - implements the ChaCha20-Poly1305 AEAD and its extended nonce variant XChaCha20-Poly1305, as specified in RFC 8439 and draft-irtf-cfrg-xchacha-01.
3
182. golang.org/x/crypto/cryptobyte (2) (1358) (17) (5) - contains types that help with parsing and constructing length-prefixed, binary messages, including ASN.1 DER.
3
183. golang.org/x/crypto/cryptobyte/asn1 (1) (46) (1) (6) - contains supporting types for parsing and building ASN.1 messages with the cryptobyte package.
3
184. golang.org/x/crypto/hkdf (1) (100) (20) (5) - implements the HMAC-based Extract-and-Expand Key Derivation Function (HKDF) as defined in RFC 5869.
190. golang.org/x/net/proxy (1) (429) (16) (1) - provides support for a variety of protocols to proxy network data.
3
191. golang.org/x/sync/errgroup (1) (151) (15) (2) - provides synchronization, error propagation, and Context cancellation for groups of goroutines working on subtasks of a common task.
210. internal/godebug (13) (316) (8) (3) - makes the settings in the $GODEBUG environment variable available to other packages.
3
211. internal/godebugs (2) (114) (1) (4) - provides a table of known GODEBUG settings, for use by a variety of other packages, including internal/godebug, runtime, runtime/metrics, and cmd/go/internal/load.
3
212. internal/goexperiment (1) (291) (1) (4) - implements support for toolchain experiments.
214. internal/msan (2) (37) (2) (4) - contains helper functions for manually instrumenting code for the memory sanitizer.
3
215. internal/nettrace (2) (46) (1) (4) - contains internal hooks for tracing activity in the net package.
3
216. internal/oserror (2) (18) (8) (4) - defines errors values used in the os package.
3
217. internal/poll (3) (2390) (11) (3) - supports non-blocking I/O on file descriptors with polling.
3
218. internal/profilerecord (1) (28) (1) (4) - holds internal types used to represent profiling records with deep stack traces.
3
219. internal/race (6) (66) (3) (3) - contains helper functions for manually instrumenting code for the race detector.
3
220. internal/reflectlite (3) (1201) (6) (3) - implements lightweight version of reflect, not using any package except for "runtime", "unsafe", and "internal/abi"
3
221. internal/runtime/atomic (2) (876) (2) (4) - provides atomic operations, independent of sync/atomic, to the runtime.
234. internal/stringslite (10) (150) (4) (3) - implements a subset of strings, only using packages that may be imported by "os".
3
235. internal/sync (2) (1010) (4) (3) - provides basic synchronization primitives such as mutual exclusion locks to internal packages (including ones that depend on sync).
3
236. internal/synctest (1) (105) (3) (3) - provides support for testing concurrent code.
239. internal/testlog (1) (113) (7) (3) - provides a back-channel communication path between tests and package os, so that cmd/go can see which environment variables and files a test consults.
3
240. internal/trace/tracev2 (1) (707) (1) (4) - contains definitions for the v2 execution trace wire format.
3
241. internal/unsafeheader (2) (37) (2) (4) - contains header declarations for the Go runtime's slice and string implementations.
250. math/bits (48) (693) (2) (2) - implements bit counting and manipulation functions for the predeclared unsigned integer types.
3
251. math/rand (4) (1265) (9) (3) - implements pseudo-random number generators suitable for tasks such as simulation, but it should not be used for security-sensitive work.
3
252. math/rand/v2 (2) (1046) (8) (5) - implements pseudo-random number generators suitable for tasks such as simulation, but it should not be used for security-sensitive work.
3
253. mime (2) (1295) (15) (4) - implements parts of the MIME spec.
3
254. mime/multipart (1) (1023) (21) (4) - implements MIME multipart parsing, as defined in RFC 2046.
3
255. mime/quotedprintable (1) (312) (15) (5) - implements quoted-printable encoding as specified by RFC 2045.
3
256. net (19) (12982) (14) (3) - provides a portable interface for network I/O, including TCP/IP, UDP, domain name resolution, and Unix domain sockets.
3
257. net/http (3) (29491) (26) (3) - provides HTTP client and server implementations.
3
258. net/http/httptrace (2) (255) (24) (4) - provides mechanisms to trace the events within HTTP client requests.
3
259. net/http/internal (1) (300) (15) (4) - contains HTTP internals shared by net/http and net/http/httputil.
267. path/filepath (5) (1039) (14) (2) - implements utility routines for manipulating filename paths in a way compatible with the target operating system-defined file paths.
3
268. reflect (15) (8694) (9) (3) - implements run-time reflection, allowing a program to manipulate objects with arbitrary types.
3
269. rsc.io/qr (1) (516) (16) (2) - encodes QR codes.
281. syscall (9) (8451) (9) (3) - contains an interface to the low-level operating system primitives.
3
282. time (44) (5623) (10) (2) - provides functionality for measuring and displaying time.
3
283. unicode (8) (10330) (1) (3) - provides data and functions to test some properties of Unicode code points.
3
284. unicode/utf16 (4) (144) (1) (3) - implements encoding and decoding of UTF-16 sequences.
3
285. unicode/utf8 (25) (578) (1) (3) - implements functions and constants to support text encoded in UTF-8.
3
286. unique (1) (552) (7) (4) - The unique package provides facilities for canonicalizing ("interning") comparable values.
3
287. unsafe (81) (271) (1) (3) - contains operations that step around the type safety of Go programs.
3
288. vendor/golang.org/x/crypto/chacha20 (1) (453) (18) (6) - implements the ChaCha20 and XChaCha20 encryption algorithms as specified in RFC 8439 and draft-irtf-cfrg-xchacha-01.
3
289. vendor/golang.org/x/crypto/chacha20poly1305 (2) (380) (19) (5) - implements the ChaCha20-Poly1305 AEAD and its extended nonce variant XChaCha20-Poly1305, as specified in RFC 8439 and draft-irtf-cfrg-xchacha-01.
3
290. vendor/golang.org/x/crypto/cryptobyte (3) (1358) (17) (4) - contains types that help with parsing and constructing length-prefixed, binary messages, including ASN.1 DER.
296. vendor/golang.org/x/net/http/httpproxy (1) (373) (19) (4) - provides support for HTTP proxy determination based on environment variables, as provided by net/http's ProxyFromEnvironment function.
3
297. vendor/golang.org/x/net/http2/hpack (2) (1585) (15) (4) - implements HPACK, a compression format for efficiently representing HTTP header fields in the context of HTTP/2.
3
298. vendor/golang.org/x/net/idna (3) (6341) (18) (4) - implements IDNA2008 using the compatibility processing defined by UTS (Unicode Technical Standard) #46, which defines a standard to deal with the transition from IDNA2003.
3
299. vendor/golang.org/x/sys/cpu (1) (759) (14) (6) - implements processor feature detection for various CPU architectures.
301. vendor/golang.org/x/text/transform (2) (709) (10) (6) - provides reader and writer wrappers that transform the bytes passing through as well as various transformations.
304. weak (4) (107) (6) (5) - provides ways to safely reference memory weakly, that is, without preventing its reclamation.
+
All Packages (sort packages by: | | | )
3
1. bufio (14) (1269) (10) (4) - implements buffered I/O. It wraps an io.Reader or io.Writer object, creating another object (Reader or Writer) that also implements the interface but provides buffering and some help for textual I/O.
9. context (31) (806) (11) (2) - defines the Context type, which carries deadlines, cancellation signals, and other request-scoped values across API boundaries and between processes.
11. crypto/aes (9) (48) (19) (3) - implements AES encryption (formerly Rijndael), as defined in U.S. Federal Information Processing Standards Publication 197.
3
12. crypto/cipher (17) (1040) (17) (3) - implements standard block cipher modes that can be wrapped around low-level block cipher implementations.
3
13. crypto/des (3) (556) (18) (4) - implements the Data Encryption Standard (DES) and the Triple Data Encryption Algorithm (TDEA) as defined in U.S. Federal Information Processing Standards Publication 46-3.
3
14. crypto/dsa (1) (330) (20) (4) - implements the Digital Signature Algorithm, as defined in FIPS 186-3.
3
15. crypto/ecdh (6) (551) (20) (4) - implements Elliptic Curve Diffie-Hellman over NIST curves and Curve25519.
3
16. crypto/ecdsa (3) (868) (21) (4) - implements the Elliptic Curve Digital Signature Algorithm, as defined in [FIPS 186-5].
18. crypto/elliptic (4) (884) (16) (4) - implements the standard NIST P-224, P-256, P-384, and P-521 elliptic curves over prime fields.
3
19. crypto/fips140 (6) (93) (14) (4) - provides information about the FIPS 140-3 Go Cryptographic Module and FIPS 140-3 mode.
3
20. crypto/hkdf (4) (84) (17) (5) - implements the HMAC-based Extract-and-Expand Key Derivation Function (HKDF) as defined in RFC 5869.
3
21. crypto/hmac (5) (65) (19) (5) - implements the Keyed-Hash Message Authentication Code (HMAC) as defined in U.S. Federal Information Processing Standards Publication 198.
3
22. crypto/hpke (1) (1482) (21) (5) - implements Hybrid Public Key Encryption (HPKE) as defined in [RFC 9180].
25. crypto/internal/boring/sig (1) (17) (1) (4) - holds “code signatures” that can be called and will result in certain code sequences being linked into the final binary.
42. crypto/internal/fips140/mlkem (1) (1573) (16) (6) - implements the quantum-resistant key encapsulation method ML-KEM (formerly known as Kyber), as specified in [NIST FIPS 203].
47. crypto/internal/fips140/sha256 (9) (440) (11) (4) - implements the SHA-224 and SHA-256 hash algorithms as defined in FIPS 180-4.
3
48. crypto/internal/fips140/sha3 (6) (933) (11) (4) - implements the SHA-3 fixed-output-length hash functions and the SHAKE variable-output-length functions defined by [FIPS 202], as well as the cSHAKE extendable-output-length functions defined by [SP 800-185].
3
49. crypto/internal/fips140/sha512 (7) (515) (11) (4) - implements the SHA-384, SHA-512, SHA-512/224, and SHA-512/256 hash algorithms as defined in FIPS 180-4.
52. crypto/internal/fips140/tls13 (1) (215) (15) (5) - implements the TLS 1.3 Key Schedule as specified in RFC 8446, Section 7.1 and allowed by FIPS 140-3 IG 2.4.B Resolution 7.
3
53. crypto/internal/fips140cache (2) (52) (7) (5) - provides a weak map that associates the lifetime of values with the lifetime of keys.
60. crypto/internal/impl (6) (107) (10) (4) - is a registry of alternative implementations of cryptographic primitives, to allow selecting them for testing.
62. crypto/internal/randutil (1) (26) (9) (4) - contains internal randomness utilities for various crypto packages.
3
63. crypto/internal/sysrand (1) (144) (14) (5) - rand provides cryptographically secure random bytes from the operating system.
3
64. crypto/md5 (4) (347) (17) (4) - implements the MD5 hash algorithm as defined in RFC 1321.
3
65. crypto/mlkem (3) (221) (17) (5) - implements the quantum-resistant key encapsulation method ML-KEM (formerly known as Kyber), as specified in [NIST FIPS 203].
3
66. crypto/pbkdf2 (1) (54) (17) (5) - implements the key derivation function PBKDF2 as defined in RFC 8018 (PKCS #5 v2.1).
3
67. crypto/rand (11) (198) (20) (3) - implements a cryptographically secure random number generator.
3
68. crypto/rc4 (2) (83) (17) (5) - implements RC4 encryption, as defined in Bruce Schneier's Applied Cryptography.
3
69. crypto/rsa (7) (1441) (21) (2) - implements RSA encryption as specified in PKCS #1 and RFC 8017.
3
70. crypto/sha1 (6) (413) (19) (3) - implements the SHA-1 hash algorithm as defined in RFC 3174.
3
71. crypto/sha256 (8) (74) (19) (3) - implements the SHA224 and SHA256 hash algorithms as defined in FIPS 180-4.
3
72. crypto/sha3 (3) (274) (12) (4) - implements the SHA-3 hash algorithms and the SHAKE extendable output functions defined in FIPS 202.
3
73. crypto/sha512 (7) (123) (19) (4) - implements the SHA-384, SHA-512, SHA-512/224, and SHA-512/256 hash algorithms as defined in FIPS 180-4.
3
74. crypto/subtle (11) (134) (4) (3) - implements functions that are often useful in cryptographic code but require careful thought to use correctly.
3
75. crypto/tls (2) (14413) (23) (4) - partially implements TLS 1.2, as specified in RFC 5246, and TLS 1.3, as specified in RFC 8446.
77. crypto/x509 (3) (7768) (22) (3) - implements a subset of the X.509 standard.
3
78. crypto/x509/pkix (1) (320) (17) (4) - contains shared, low level structures used for ASN.1 parsing and serialization of X.509 certificates, CRL and OCSP.
3
79. embed (1) (436) (12) (3) - provides access to files embedded in the running Go program.
3
80. encoding (1) (78) (1) (4) - defines interfaces shared by other packages that convert data to and from byte-level and textual representations.
3
81. encoding/asn1 (4) (2107) (16) (4) - implements parsing of DER-encoded ASN.1 data structures, as defined in ITU-T Rec X.690.
3
82. encoding/base64 (14) (665) (9) (3) - implements base64 encoding as specified by RFC 4648.
3
83. encoding/binary (32) (1214) (10) (3) - implements simple translation between numbers and byte sequences and encoding and decoding of varints.
92. github.com/cespare/xxhash/v2 (1) (316) (11) (3) - implements the 64-bit variant of xxHash (XXH64) as described at http://cyan4973.github.io/xxHash/.
101. github.com/gotd/log (8) (421) (15) (1) - defines a minimal, dependency-free logging port for gotd libraries.
3
102. github.com/gotd/neo (1) (538) (15) (2) - implements side effects simulation for testing.
3
103. github.com/gotd/td/ascii (1) (19) (1) (2) - provides data and functions to test some properties of ASCII code points.
3
104. github.com/gotd/td/bin (17) (742) (16) (1) - implements binary serialization and deserialization for TL, providing Buffer that can decode and encode basic Type Language types.
144. github.com/klauspost/compress/gzip (1) (670) (17) (2) - implements reading and writing of gzip format compressed files, as specified in RFC 1952.
3
145. github.com/klauspost/compress/huff0 (1) (2788) (16) (6) - This file contains the specialisation of Decoder.Decompress4X and Decoder.Decompress1X that use an asm implementation of thir main loops.
151. github.com/refraction-networking/utls (1) (25388) (28) (4) - partially implements TLS 1.2, as specified in RFC 5246, and TLS 1.3, as specified in RFC 8446.
178. go.uber.org/atomic (3) (1716) (16) (1) - provides simple wrappers around numerics to enforce atomic access.
3
179. go.uber.org/multierr (9) (694) (15) (1) - allows combining one or more errors together.
3
180. golang.org/x/crypto/chacha20 (1) (453) (18) (6) - implements the ChaCha20 and XChaCha20 encryption algorithms as specified in RFC 8439 and draft-irtf-cfrg-xchacha-01.
3
181. golang.org/x/crypto/chacha20poly1305 (2) (380) (19) (5) - implements the ChaCha20-Poly1305 AEAD and its extended nonce variant XChaCha20-Poly1305, as specified in RFC 8439 and draft-irtf-cfrg-xchacha-01.
3
182. golang.org/x/crypto/cryptobyte (2) (1358) (17) (5) - contains types that help with parsing and constructing length-prefixed, binary messages, including ASN.1 DER.
3
183. golang.org/x/crypto/cryptobyte/asn1 (1) (46) (1) (6) - contains supporting types for parsing and building ASN.1 messages with the cryptobyte package.
3
184. golang.org/x/crypto/hkdf (1) (100) (20) (5) - implements the HMAC-based Extract-and-Expand Key Derivation Function (HKDF) as defined in RFC 5869.
190. golang.org/x/net/proxy (1) (429) (16) (1) - provides support for a variety of protocols to proxy network data.
3
191. golang.org/x/sync/errgroup (1) (151) (15) (2) - provides synchronization, error propagation, and Context cancellation for groups of goroutines working on subtasks of a common task.
210. internal/godebug (13) (316) (8) (3) - makes the settings in the $GODEBUG environment variable available to other packages.
3
211. internal/godebugs (2) (114) (1) (4) - provides a table of known GODEBUG settings, for use by a variety of other packages, including internal/godebug, runtime, runtime/metrics, and cmd/go/internal/load.
3
212. internal/goexperiment (1) (291) (1) (4) - implements support for toolchain experiments.
214. internal/msan (2) (37) (2) (4) - contains helper functions for manually instrumenting code for the memory sanitizer.
3
215. internal/nettrace (2) (46) (1) (4) - contains internal hooks for tracing activity in the net package.
3
216. internal/oserror (2) (18) (8) (4) - defines errors values used in the os package.
3
217. internal/poll (3) (2390) (11) (3) - supports non-blocking I/O on file descriptors with polling.
3
218. internal/profilerecord (1) (28) (1) (4) - holds internal types used to represent profiling records with deep stack traces.
3
219. internal/race (6) (66) (3) (3) - contains helper functions for manually instrumenting code for the race detector.
3
220. internal/reflectlite (3) (1201) (6) (3) - implements lightweight version of reflect, not using any package except for "runtime", "unsafe", and "internal/abi"
3
221. internal/runtime/atomic (2) (876) (2) (4) - provides atomic operations, independent of sync/atomic, to the runtime.
234. internal/stringslite (10) (150) (4) (3) - implements a subset of strings, only using packages that may be imported by "os".
3
235. internal/sync (2) (1010) (4) (3) - provides basic synchronization primitives such as mutual exclusion locks to internal packages (including ones that depend on sync).
3
236. internal/synctest (1) (105) (3) (3) - provides support for testing concurrent code.
239. internal/testlog (1) (113) (7) (3) - provides a back-channel communication path between tests and package os, so that cmd/go can see which environment variables and files a test consults.
3
240. internal/trace/tracev2 (1) (707) (1) (4) - contains definitions for the v2 execution trace wire format.
3
241. internal/unsafeheader (2) (37) (2) (4) - contains header declarations for the Go runtime's slice and string implementations.
250. math/bits (48) (693) (2) (2) - implements bit counting and manipulation functions for the predeclared unsigned integer types.
3
251. math/rand (4) (1265) (9) (3) - implements pseudo-random number generators suitable for tasks such as simulation, but it should not be used for security-sensitive work.
3
252. math/rand/v2 (2) (1046) (8) (5) - implements pseudo-random number generators suitable for tasks such as simulation, but it should not be used for security-sensitive work.
3
253. mime (2) (1295) (15) (4) - implements parts of the MIME spec.
3
254. mime/multipart (1) (1023) (21) (4) - implements MIME multipart parsing, as defined in RFC 2046.
3
255. mime/quotedprintable (1) (312) (15) (5) - implements quoted-printable encoding as specified by RFC 2045.
3
256. net (19) (12982) (14) (3) - provides a portable interface for network I/O, including TCP/IP, UDP, domain name resolution, and Unix domain sockets.
3
257. net/http (3) (29491) (26) (3) - provides HTTP client and server implementations.
3
258. net/http/httptrace (2) (255) (24) (4) - provides mechanisms to trace the events within HTTP client requests.
3
259. net/http/internal (1) (300) (15) (4) - contains HTTP internals shared by net/http and net/http/httputil.
267. path/filepath (5) (1039) (14) (2) - implements utility routines for manipulating filename paths in a way compatible with the target operating system-defined file paths.
3
268. reflect (15) (8694) (9) (3) - implements run-time reflection, allowing a program to manipulate objects with arbitrary types.
3
269. rsc.io/qr (1) (516) (16) (2) - encodes QR codes.
281. syscall (9) (8451) (9) (3) - contains an interface to the low-level operating system primitives.
3
282. time (44) (5623) (10) (2) - provides functionality for measuring and displaying time.
3
283. unicode (8) (10330) (1) (3) - provides data and functions to test some properties of Unicode code points.
3
284. unicode/utf16 (4) (144) (1) (3) - implements encoding and decoding of UTF-16 sequences.
3
285. unicode/utf8 (25) (578) (1) (3) - implements functions and constants to support text encoded in UTF-8.
3
286. unique (1) (552) (7) (4) - The unique package provides facilities for canonicalizing ("interning") comparable values.
3
287. unsafe (81) (271) (1) (3) - contains operations that step around the type safety of Go programs.
3
288. vendor/golang.org/x/crypto/chacha20 (1) (453) (18) (6) - implements the ChaCha20 and XChaCha20 encryption algorithms as specified in RFC 8439 and draft-irtf-cfrg-xchacha-01.
3
289. vendor/golang.org/x/crypto/chacha20poly1305 (2) (380) (19) (5) - implements the ChaCha20-Poly1305 AEAD and its extended nonce variant XChaCha20-Poly1305, as specified in RFC 8439 and draft-irtf-cfrg-xchacha-01.
3
290. vendor/golang.org/x/crypto/cryptobyte (3) (1358) (17) (4) - contains types that help with parsing and constructing length-prefixed, binary messages, including ASN.1 DER.
296. vendor/golang.org/x/net/http/httpproxy (1) (373) (19) (4) - provides support for HTTP proxy determination based on environment variables, as provided by net/http's ProxyFromEnvironment function.
3
297. vendor/golang.org/x/net/http2/hpack (2) (1585) (15) (4) - implements HPACK, a compression format for efficiently representing HTTP header fields in the context of HTTP/2.
3
298. vendor/golang.org/x/net/idna (3) (6341) (18) (4) - implements IDNA2008 using the compatibility processing defined by UTS (Unicode Technical Standard) #46, which defines a standard to deal with the transition from IDNA2003.
3
299. vendor/golang.org/x/sys/cpu (1) (759) (14) (6) - implements processor feature detection for various CPU architectures.
301. vendor/golang.org/x/text/transform (2) (709) (10) (6) - provides reader and writer wrappers that transform the bytes passing through as well as various transformations.
304. weak (4) (107) (6) (5) - provides ways to safely reference memory weakly, that is, without preventing its reclamation.
The pages are generated with Goldsv0.8.4. (GOOS=linux GOARCH=amd64)
Golds is a Go 101 project developed by Tapir Liu.
diff --git a/pkg/builtin.html b/pkg/builtin.html
index 749f72e82cf..e5e964f5299 100644
--- a/pkg/builtin.html
+++ b/pkg/builtin.html
@@ -49,13 +49,13 @@
complex64 is the set of all complex numbers with float32 real and
imaginary parts.
-
DefaultReader is a sentinel type, embedded in the default
[crypto/rand.Reader], used to recognize it when passed to
APIs that accept a rand io.Reader.
@@ -74,40 +74,40 @@
- ( DefaultReader) defaultReader()
+ ( DefaultReader) defaultReader()
crypto/internal/rand.reader
-
Package-Level Functions (total 8, in which 4 are exported)
+
Package-Level Functions (total 7, in which 4 are exported)
-
Read fills b with cryptographically secure random bytes. In FIPS mode, it
uses an SP 800-90A Rev. 1 Deterministic Random Bit Generator (DRBG).
Otherwise, it uses the operating system's random number generator.
-
+
ReadWithReader uses Reader to fill b with cryptographically secure random
bytes. It is intended for use in APIs that expose a rand io.Reader.
-
+
SetTestingReader sets a global, deterministic cryptographic randomness source
for testing purposes. Its Read method must never return an error, it must
never return short, and it must be safe for concurrent use.
This is only intended to be used by the testing/cryptotest package.
-
Package-Level Variables (total 4, none are exported)
-
+
getEntropy is very slow (~500µs), so we don't want it on the hot path.
We keep both a persistent DRBG instance and a pool of additional instances.
Occasional uses will use drbgInstance, even if the pool was emptied since the
last use. Frequent concurrent uses will fill the pool and use it.
-
memory is a scratch buffer that is accessed between samples by the entropy
source to expose it to memory access timings.
@@ -119,7 +119,7 @@
at first use. This ensures that programs that do not use the FIPS 140-3 module
do not incur any memory use or initialization penalties.
-
Package-Level Functions (total 123, in which 28 are exported)
+
Package-Level Functions (total 124, in which 28 are exported)
CreateCertificate creates a new X.509 v3 certificate based on a template.
@@ -1939,7 +1939,7 @@
New changes in the system cert pool might not be reflected in subsequent calls.
-
+
alreadyInChain checks whether a candidate certificate is present in a chain.
Rather than doing a direct byte for byte equivalency check, we check if the
subject, public key, and SAN, if present, are equal. This prevents loops that
@@ -1951,7 +1951,7 @@
most-significant bit in a byte to be the "first" bit. This convention
matches ASN.1, but differs from almost everything else.
-
Type Parameters:
T: string | *net.IPNet
@@ -2021,7 +2021,7 @@
marshalSANs marshals a list of addresses into a the contents of an X.509
SubjectAlternativeName extension.
-
newRawAttributes converts AttributeTypeAndValueSETs from a template
CertificateRequest's Attributes into tbsCertificateRequest RawAttributes.
@@ -2058,7 +2058,7 @@
Section 4.2.1.6 that's correct for an rfc822Name from a certificate: “The
format of an rfc822Name is a "Mailbox" as defined in RFC 2821, Section 4.1.2”.
-
readUniqueDirectoryEntries is like os.ReadDir but omits
symlinks that point within the directory.
@@ -2067,7 +2067,7 @@
Identifier to use for signing, based on the key type. If sigAlgo is not zero
then it overrides the default.
-
toLowerCaseASCII returns a lower-case version of in. See RFC 6125 6.4.1. We use
an explicitly ASCII function to avoid any sharp corners resulting from
performing Unicode operations on DNS labels.
@@ -2087,7 +2087,7 @@
IncorrectPasswordError is returned when an incorrect password is detected.
-
ServerRNG is server-side random number generator.
@@ -286,25 +286,51 @@
TestServerRNG : ServerRNG
-
+
+ UnexpectedEncryptedError is returned by the server key-exchange flow when it
+ reads a frame whose leading auth key id is non-zero while expecting an
+ unencrypted exchange message. This means the peer is using an already
+ established auth key instead of performing key exchange.
+
+ The caller should resolve the key and handle Frame as an encrypted message
+ rather than treating it as an exchange failure. In particular, callers must
+ not blindly reply with auth_key_not_found (-404): clients such as Telegram
+ Desktop treat a -404 on a temporary key as "key destroyed", discard it and
+ re-run key exchange, which leads to a reconnect/key-exchange storm.
+
+
+
+ AuthKeyID is the auth key id the encrypted frame was sent with.
+
+
+ Frame is the raw transport frame (the full encrypted message).
+
+
+
+ Error implements error.
+
+
+ *UnexpectedEncryptedError : error
+
+
Engine handles RPC requests.ackmap[int64]chan struct{}clockclock.Clock
- closeduint32
+
+ closed is guarded by mux: it must be set and observed atomically with
+ respect to wg.Add in Do, otherwise Close may observe a zero WaitGroup
+ counter and return from Wait concurrently with a new Add.
+dropDropHandlerloglog.HelpermaxRetriesint
@@ -52,17 +56,17 @@
rpcmap[int64]func(*bin.Buffer, error) errorsendSendwgsync.WaitGroup
-
-
+
+ Close gracefully closes the engine.
All pending requests will be awaited.
All Do method calls of closed engine will return ErrEngineClosed error.
-
+ Do sends request to server and blocks until response is received, performing
multiple retries if needed.
-
+ ForceClose forcibly closes the engine.
All pending requests will be canceled.
All Do method calls of closed engine will return ErrEngineClosed error.
@@ -70,16 +74,15 @@
NotifyAcks notifies engine about received acknowledgements.
-
+ NotifyError notifies engine about received RPC error.
-
+ NotifyResult notifies engine about received RPC response.
-
- (*Engine) isClosed() bool
+ (*Engine) removeAck(id int64)
-
+ retryUntilAck resends the request to the server until request is
acknowledged.
@@ -104,19 +107,19 @@
func New(send Send, cfg Options) *Engine
-
Package-Level Functions (total 3, all are exported)
-
+
New creates new rpc Engine.
diff --git a/pkg/golang.org/x/sys/cpu.html b/pkg/golang.org/x/sys/cpu.html
index 609f4fc912c..5c19ed70597 100644
--- a/pkg/golang.org/x/sys/cpu.html
+++ b/pkg/golang.org/x/sys/cpu.html
@@ -53,8 +53,8 @@
byteOrder is a subset of encoding/binary.ByteOrder.
- ( byteOrder) Uint32([]byte) uint32
- ( byteOrder) Uint64([]byte) uint64
+ ( byteOrder) Uint32([]byte) uint32
+ ( byteOrder) Uint64([]byte) uint64
encoding/binary.ByteOrder(interface)
@@ -87,15 +87,15 @@
Option names should be lower case. e.g. avx instead of AVX.
-
+ // whether feature should be enabled
- Feature*bool
- Namestring
-
+ Feature*bool
+ Namestring
+ // whether feature is mandatory and can not be disabled
-
+ // whether feature value was specified in GODEBUG
diff --git a/pkg/vendor/golang.org/x/sys/cpu.html b/pkg/vendor/golang.org/x/sys/cpu.html
index 97c82ce1373..d5f2b1a4441 100644
--- a/pkg/vendor/golang.org/x/sys/cpu.html
+++ b/pkg/vendor/golang.org/x/sys/cpu.html
@@ -53,8 +53,8 @@
byteOrder is a subset of encoding/binary.ByteOrder.
- ( byteOrder) Uint32([]byte) uint32
- ( byteOrder) Uint64([]byte) uint64
+ ( byteOrder) Uint32([]byte) uint32
+ ( byteOrder) Uint64([]byte) uint64
encoding/binary.ByteOrder(interface)
@@ -87,15 +87,15 @@
Option names should be lower case. e.g. avx instead of AVX.
-
+ // whether feature should be enabled
- Feature*bool
- Namestring
-
+ Feature*bool
+ Namestring
+ // whether feature is mandatory and can not be disabled
-
+ // whether feature value was specified in GODEBUG
diff --git a/src/crypto/hpke/pq.go.html b/src/crypto/hpke/pq.go.html
index 6d6da2a7b76..79adcdab480 100644
--- a/src/crypto/hpke/pq.go.html
+++ b/src/crypto/hpke/pq.go.html
@@ -599,7 +599,7 @@
func ( *hybridKEM) () (PrivateKey, error) { := make([]byte, 32)
-drbg.Read()
+drbg.Read()return .NewPrivateKey()}
diff --git a/src/crypto/internal/fips140/aes/gcm/gcm_nonces.go.html b/src/crypto/internal/fips140/aes/gcm/gcm_nonces.go.html
index 065c6a3e9a4..37a9284d243 100644
--- a/src/crypto/internal/fips140/aes/gcm/gcm_nonces.go.html
+++ b/src/crypto/internal/fips140/aes/gcm/gcm_nonces.go.html
@@ -223,7 +223,7 @@
panic("crypto/cipher: invalid buffer overlap of output and additional data") }fips140.RecordApproved()
-drbg.Read()
+drbg.Read()seal(, , , , )}
diff --git a/src/crypto/internal/fips140/drbg/entropy_fips140.go.html b/src/crypto/internal/fips140/drbg/entropy_fips140.go.html
index aa9e45dc5b5..016713875ec 100644
--- a/src/crypto/internal/fips140/drbg/entropy_fips140.go.html
+++ b/src/crypto/internal/fips140/drbg/entropy_fips140.go.html
@@ -19,132 +19,63 @@
input[id=r0]:checked ~pre label[for=r0],
input[id=r1]:checked ~pre label[for=r1],
input[id=r2]:checked ~pre label[for=r2],
-input[id=r3]:checked ~pre label[for=r3],
-input[id=r4]:checked ~pre label[for=r4],
-input[id=r5]:checked ~pre label[for=r5],
-input[id=r6]:checked ~pre label[for=r6],
-input[id=r7]:checked ~pre label[for=r7],
-input[id=r8]:checked ~pre label[for=r8],
-input[id=r9]:checked ~pre label[for=r9]
+input[id=r3]:checked ~pre label[for=r3]
{background: #226; color: #ff8;}
-input[id=i0]:checked ~pre .i0,
-input[id=i1]:checked ~pre .i1,
-input[id=i2]:checked ~pre .i2,
-input[id=i3]:checked ~pre .i3
+input[id=i0]:checked ~pre .i0
{background: brown; color: #eed;}
-
-
-
-
-
-
-
-
-
// Copyright 2026 The Go Authors. All rights reserved.// Use of this source code is governed by a BSD-style// license that can be found in the LICENSE file.
-//go:build !wasm
-
-// This file contains reading from from entropy sources in FIPS-140
-// mode. It uses a scratch buffer in the BSS section (see below),
-// which usually doesn't cost much, except on Wasm, due to the way
-// the linear memory works. FIPS-140 mode is not supported on Wasm,
-// so we just use a build tag to exclude it. (Could also exclude other
-// platforms that does not support FIPS-140 mode, but as the BSS
-// variable doesn't cost much, don't bother.)
-
-package drbg
-
-import (
-entropy
-
-
-
-)
-
-// memory is a scratch buffer that is accessed between samples by the entropy
-// source to expose it to memory access timings.
-//
-// We reuse it and share it between Seed calls to avoid the significant (~500µs)
-// cost of zeroing a new allocation every time. The entropy source accesses it
-// using atomics (and doesn't care about its contents).
-//
-// It should end up in the .noptrbss section, and become backed by physical pages
-// at first use. This ensures that programs that do not use the FIPS 140-3 module
-// do not incur any memory use or initialization penalties.
-varmemoryentropy.ScratchBuffer
-
-func () *[SeedSize]byte {
-varint
- , := entropy.Seed(&memory)
-for != nil {
-// The CPU jitter-based SP 800-90B entropy source has a non-negligible
- // chance of failing the startup health tests.
- //
- // Each time it does, it enters a permanent failure state, and we
- // restart it anew. This is not expected to happen more than a few times
- // in a row.
-if ++; > 100 {
-panic("fips140/drbg: failed to obtain initial entropy")
- }
- , = entropy.Seed(&memory)
- }
-return &
-}
-
-// getEntropy is very slow (~500µs), so we don't want it on the hot path.
-// We keep both a persistent DRBG instance and a pool of additional instances.
-// Occasional uses will use drbgInstance, even if the pool was emptied since the
-// last use. Frequent concurrent uses will fill the pool and use it.
-vardrbgInstanceatomic.Pointer[Counter]
-vardrbgPool = sync.Pool{
-New: func() any {
-returnNewCounter(getEntropy())
- },
-}
-
-func ( []byte) {
-// At every read, 128 random bits from the operating system are mixed as
- // additional input, to make the output as strong as non-FIPS randomness.
- // This is not credited as entropy for FIPS purposes, as allowed by Section
- // 8.7.2: "Note that a DRBG does not rely on additional input to provide
- // entropy, even though entropy could be provided in the additional input".
- := new([SeedSize]byte)
-sysrand.Read([:16])
-
- := drbgInstance.Swap(nil)
-if == nil {
- = drbgPool.Get().(*Counter)
- }
-deferfunc() {
-if !drbgInstance.CompareAndSwap(nil, ) {
-drbgPool.Put()
- }
- }()
-
-forlen() > 0 {
- := min(len(), maxRequestSize)
-if := .Generate([:], ); {
-// See SP 800-90A Rev. 1, Section 9.3.1, Steps 6-8, as explained in
- // Section 9.3.2: if Generate reports a reseed is required, the
- // additional input is passed to Reseed along with the entropy and
- // then nulled before the next Generate call.
- .Reseed(getEntropy(), )
- = nil
-continue
- }
- = [:]
- }
-}
+// Entropy generation in FIPS 140-3 mode uses a scratch buffer in the BSS
+// section (see below), which usually doesn't cost much, except on Wasm, due to
+// the way the linear memory works. FIPS 140-3 mode is not supported on Wasm, so
+// we just use a build tag to exclude it. (Could also exclude other platforms
+// that does not support FIPS 140-3 mode, but as the BSS variable doesn't cost
+// much, don't bother.)
+//
+//go:build !wasm
+
+package drbg
+
+importentropy
+
+// memory is a scratch buffer that is accessed between samples by the entropy
+// source to expose it to memory access timings.
+//
+// We reuse it and share it between Seed calls to avoid the significant (~500µs)
+// cost of zeroing a new allocation every time. The entropy source accesses it
+// using atomics (and doesn't care about its contents).
+//
+// It should end up in the .noptrbss section, and become backed by physical pages
+// at first use. This ensures that programs that do not use the FIPS 140-3 module
+// do not incur any memory use or initialization penalties.
+varmemoryentropy.ScratchBuffer
+
+func () *[SeedSize]byte {
+varint
+ , := entropy.Seed(&memory)
+for != nil {
+// The CPU jitter-based SP 800-90B entropy source has a non-negligible
+ // chance of failing the startup health tests.
+ //
+ // Each time it does, it enters a permanent failure state, and we
+ // restart it anew. This is not expected to happen more than a few times
+ // in a row.
+if ++; > 100 {
+panic("fips140/drbg: failed to obtain initial entropy")
+ }
+ , = entropy.Seed(&memory)
+ }
+return &
+}
// Copyright 2024 The Go Authors. All rights reserved.
@@ -63,60 +75,103 @@
-)
-
-// Read fills b with cryptographically secure random bytes. In FIPS mode, it
-// uses an SP 800-90A Rev. 1 Deterministic Random Bit Generator (DRBG).
-// Otherwise, it uses the operating system's random number generator.
-func ( []byte) {
-iftestingReader != nil {
-fips140.RecordNonApproved()
-// Avoid letting b escape in the non-testing case.
- := make([]byte, len())
-testingReader.Read()
-copy(, )
-return
- }
+
+
+)
+
+// getEntropy is very slow (~500µs), so we don't want it on the hot path.
+// We keep both a persistent DRBG instance and a pool of additional instances.
+// Occasional uses will use drbgInstance, even if the pool was emptied since the
+// last use. Frequent concurrent uses will fill the pool and use it.
+vardrbgInstanceatomic.Pointer[Counter]
+vardrbgPool = sync.Pool{
+New: func() any {
+returnNewCounter(getEntropy())
+ },
+}
-if !fips140.Enabled {
-sysrand.Read()
-return
- }
-
-readFromEntropy()
-}
-
-vartestingReaderio.Reader
-
-// SetTestingReader sets a global, deterministic cryptographic randomness source
-// for testing purposes. Its Read method must never return an error, it must
-// never return short, and it must be safe for concurrent use.
-//
-// This is only intended to be used by the testing/cryptotest package.
-func ( io.Reader) {
-testingReader =
-}
-
-// DefaultReader is a sentinel type, embedded in the default
-// [crypto/rand.Reader], used to recognize it when passed to
-// APIs that accept a rand io.Reader.
-//
-// Any Reader that implements this interface is assumed to
-// call [Read] as its Read method.
-typeDefaultReaderinterface{ defaultReader() }
-
-// ReadWithReader uses Reader to fill b with cryptographically secure random
-// bytes. It is intended for use in APIs that expose a rand io.Reader.
-func ( io.Reader, []byte) error {
-if , := .(DefaultReader); {
-Read()
-returnnil
- }
-
-fips140.RecordNonApproved()
- , := io.ReadFull(, )
-return
-}
+// Read fills b with cryptographically secure random bytes. In FIPS mode, it
+// uses an SP 800-90A Rev. 1 Deterministic Random Bit Generator (DRBG).
+// Otherwise, it uses the operating system's random number generator.
+func ( []byte) {
+iftestingReader != nil {
+fips140.RecordNonApproved()
+// Avoid letting b escape in the non-testing case.
+ := make([]byte, len())
+testingReader.Read()
+copy(, )
+return
+ }
+
+if !fips140.Enabled {
+sysrand.Read()
+return
+ }
+
+// At every read, 128 random bits from the operating system are mixed as
+ // additional input, to make the output as strong as non-FIPS randomness.
+ // This is not credited as entropy for FIPS purposes, as allowed by Section
+ // 8.7.2: "Note that a DRBG does not rely on additional input to provide
+ // entropy, even though entropy could be provided in the additional input".
+ := new([SeedSize]byte)
+sysrand.Read([:16])
+
+ := drbgInstance.Swap(nil)
+if == nil {
+ = drbgPool.Get().(*Counter)
+ }
+deferfunc() {
+if !drbgInstance.CompareAndSwap(nil, ) {
+drbgPool.Put()
+ }
+ }()
+
+forlen() > 0 {
+ := min(len(), maxRequestSize)
+if := .Generate([:], ); {
+// See SP 800-90A Rev. 1, Section 9.3.1, Steps 6-8, as explained in
+ // Section 9.3.2: if Generate reports a reseed is required, the
+ // additional input is passed to Reseed along with the entropy and
+ // then nulled before the next Generate call.
+ .Reseed(getEntropy(), )
+ = nil
+continue
+ }
+ = [:]
+ }
+}
+
+vartestingReaderio.Reader
+
+// SetTestingReader sets a global, deterministic cryptographic randomness source
+// for testing purposes. Its Read method must never return an error, it must
+// never return short, and it must be safe for concurrent use.
+//
+// This is only intended to be used by the testing/cryptotest package.
+func ( io.Reader) {
+testingReader =
+}
+
+// DefaultReader is a sentinel type, embedded in the default
+// [crypto/rand.Reader], used to recognize it when passed to
+// APIs that accept a rand io.Reader.
+//
+// Any Reader that implements this interface is assumed to
+// call [Read] as its Read method.
+typeDefaultReaderinterface{ defaultReader() }
+
+// ReadWithReader uses Reader to fill b with cryptographically secure random
+// bytes. It is intended for use in APIs that expose a rand io.Reader.
+func ( io.Reader, []byte) error {
+if , := .(DefaultReader); {
+Read()
+returnnil
+ }
+
+fips140.RecordNonApproved()
+ , := io.ReadFull(, )
+return
+}
The pages are generated with Goldsv0.8.4. (GOOS=linux GOARCH=amd64)
diff --git a/src/crypto/internal/fips140/ecdh/ecdh.go.html b/src/crypto/internal/fips140/ecdh/ecdh.go.html
index c3832e27720..b0c52b1eb1a 100644
--- a/src/crypto/internal/fips140/ecdh/ecdh.go.html
+++ b/src/crypto/internal/fips140/ecdh/ecdh.go.html
@@ -311,7 +311,7 @@
for { := make([]byte, len(.N))
-if := drbg.ReadWithReader(, ); != nil {
+if := drbg.ReadWithReader(, ); != nil {returnnil, }// In tests, rand will return all zeros and NewPrivateKey will reject
diff --git a/src/crypto/internal/fips140/ecdsa/ecdsa.go.html b/src/crypto/internal/fips140/ecdsa/ecdsa.go.html
index 6aeae732c72..2226287e0f4 100644
--- a/src/crypto/internal/fips140/ecdsa/ecdsa.go.html
+++ b/src/crypto/internal/fips140/ecdsa/ecdsa.go.html
@@ -528,7 +528,7 @@
fips140.RecordApproved() , , := randomPoint(, func( []byte) error {
-returndrbg.ReadWithReader(, )
+returndrbg.ReadWithReader(, ) })if != nil {returnnil,
@@ -619,7 +619,7 @@
// advantage of closely resembling Deterministic ECDSA. := make([]byte, len(.d))
-if := drbg.ReadWithReader(, ); != nil {
+if := drbg.ReadWithReader(, ); != nil {returnnil, }
diff --git a/src/crypto/internal/fips140/ed25519/ed25519.go.html b/src/crypto/internal/fips140/ed25519/ed25519.go.html
index aa3619168e3..c8130972a06 100644
--- a/src/crypto/internal/fips140/ed25519/ed25519.go.html
+++ b/src/crypto/internal/fips140/ed25519/ed25519.go.html
@@ -365,7 +365,7 @@
func ( *PrivateKey) (*PrivateKey, error) {fips140.RecordApproved()
-drbg.Read(.seed[:])
+drbg.Read(.seed[:])precomputePrivateKey()fipsPCT()return , nil
diff --git a/src/crypto/internal/fips140/mlkem/mlkem1024.go.html b/src/crypto/internal/fips140/mlkem/mlkem1024.go.html
index 96ccc452f95..7c4bb5619d8 100644
--- a/src/crypto/internal/fips140/mlkem/mlkem1024.go.html
+++ b/src/crypto/internal/fips140/mlkem/mlkem1024.go.html
@@ -467,9 +467,9 @@
func ( *DecapsulationKey1024) (*DecapsulationKey1024, error) {fipsSelfTest()var [32]byte
-drbg.Read([:])
+drbg.Read([:])var [32]byte
-drbg.Read([:])
+drbg.Read([:])kemKeyGen1024(, &, &)fips140.PCT("ML-KEM PCT", func() error { returnkemPCT1024() })fips140.RecordApproved()
@@ -546,7 +546,7 @@
// that avoids returning a broken key vs a random key if this function is // called in contravention of the TestingOnlyNewDecapsulationKey1024 function // comment advising against it.
-drbg.Read(.d[:])
+drbg.Read(.d[:])return , nil}
@@ -634,7 +634,7 @@
func ( *EncapsulationKey1024) ( *[CiphertextSize1024]byte) (, []byte) {fipsSelfTest()var [messageSize]byte
-drbg.Read([:])
+drbg.Read([:])// Note that the modulus check (step 2 of the encapsulation key check from // FIPS 203, Section 7.2) is performed by polyByteDecode in parseEK1024.fips140.RecordApproved()
diff --git a/src/crypto/internal/fips140/mlkem/mlkem768.go.html b/src/crypto/internal/fips140/mlkem/mlkem768.go.html
index 431f382096a..1ada9a8ec29 100644
--- a/src/crypto/internal/fips140/mlkem/mlkem768.go.html
+++ b/src/crypto/internal/fips140/mlkem/mlkem768.go.html
@@ -525,9 +525,9 @@
func ( *DecapsulationKey768) (*DecapsulationKey768, error) {fipsSelfTest()var [32]byte
-drbg.Read([:])
+drbg.Read([:])var [32]byte
-drbg.Read([:])
+drbg.Read([:])kemKeyGen(, &, &)fips140.PCT("ML-KEM PCT", func() error { returnkemPCT() })fips140.RecordApproved()
@@ -604,7 +604,7 @@
// that avoids returning a broken key vs a random key if this function is // called in contravention of the TestingOnlyNewDecapsulationKey768 function // comment advising against it.
-drbg.Read(.d[:])
+drbg.Read(.d[:])return , nil}
@@ -692,7 +692,7 @@
func ( *EncapsulationKey768) ( *[CiphertextSize768]byte) (, []byte) {fipsSelfTest()var [messageSize]byte
-drbg.Read([:])
+drbg.Read([:])// Note that the modulus check (step 2 of the encapsulation key check from // FIPS 203, Section 7.2) is performed by polyByteDecode in parseEK.fips140.RecordApproved()
diff --git a/src/crypto/internal/fips140/rsa/keygen.go.html b/src/crypto/internal/fips140/rsa/keygen.go.html
index 15d199b0ad6..20714df8f31 100644
--- a/src/crypto/internal/fips140/rsa/keygen.go.html
+++ b/src/crypto/internal/fips140/rsa/keygen.go.html
@@ -341,7 +341,7 @@
:= make([]byte, (+7)/8)for {
-if := drbg.ReadWithReader(, ); != nil {
+if := drbg.ReadWithReader(, ); != nil {returnnil, }// Clear the most significant bits to reach the desired size. We use a
@@ -445,7 +445,7 @@
:= make([]byte, (+7)/8)for {
-drbg.Read()
+drbg.Read() := len()*8 - [0] &= 0b1111_1111 >> , := millerRabinIteration(, )
diff --git a/src/crypto/internal/fips140/rsa/pkcs1v22.go.html b/src/crypto/internal/fips140/rsa/pkcs1v22.go.html
index c0e3090d876..e681d7363cc 100644
--- a/src/crypto/internal/fips140/rsa/pkcs1v22.go.html
+++ b/src/crypto/internal/fips140/rsa/pkcs1v22.go.html
@@ -572,7 +572,7 @@
fips140.RecordNonApproved() } := make([]byte, )
-if := drbg.ReadWithReader(, ); != nil {
+if := drbg.ReadWithReader(, ); != nil {returnnil, }
@@ -688,7 +688,7 @@
[len()-len()-1] = 1copy([len()-len():], )
-if := drbg.ReadWithReader(, ); != nil {
+if := drbg.ReadWithReader(, ); != nil {returnnil, }
diff --git a/src/crypto/internal/fips140only/fips140only.go.html b/src/crypto/internal/fips140only/fips140only.go.html
index 4af9359b139..09b56fc3410 100644
--- a/src/crypto/internal/fips140only/fips140only.go.html
+++ b/src/crypto/internal/fips140only/fips140only.go.html
@@ -80,7 +80,7 @@
}func ( io.Reader) bool {
- , := .(drbg.DefaultReader)
+ , := .(drbg.DefaultReader)return}
diff --git a/src/crypto/internal/rand/rand.go.html b/src/crypto/internal/rand/rand.go.html
index 1d4e1d6f764..2ac49f2d23d 100644
--- a/src/crypto/internal/rand/rand.go.html
+++ b/src/crypto/internal/rand/rand.go.html
@@ -78,7 +78,7 @@
)typereaderstruct {
-drbg.DefaultReader
+drbg.DefaultReader}func ( reader) ( []byte) ( int, error) {
@@ -88,7 +88,7 @@
}returnlen(), nil }
-drbg.Read()
+drbg.Read()returnlen(), nil}
@@ -132,7 +132,7 @@
//// If true, the Read method of r can be assumed to call [drbg.Read].func ( io.Reader) bool {
- , := .(drbg.DefaultReader)
+ , := .(drbg.DefaultReader)return}
// Code generated by cmd/cgo; DO NOT EDIT.
-//line /usr/local/go/src/net/cgo_linux.go:1:1
+//line /opt/hostedtoolcache/go/1.26.4/x64/src/net/cgo_linux.go:1:1// Copyright 2011 The Go Authors. All rights reserved.// Use of this source code is governed by a BSD-style// license that can be found in the LICENSE file.
diff --git a/src/net/cgo_resnew.go.html b/src/net/cgo_resnew.go.html
index 44109ad2c07..07161702d17 100644
--- a/src/net/cgo_resnew.go.html
+++ b/src/net/cgo_resnew.go.html
@@ -38,7 +38,7 @@
// Code generated by cmd/cgo; DO NOT EDIT.
-//line /usr/local/go/src/net/cgo_resnew.go:1:1
+//line /opt/hostedtoolcache/go/1.26.4/x64/src/net/cgo_resnew.go:1:1// Copyright 2015 The Go Authors. All rights reserved.// Use of this source code is governed by a BSD-style// license that can be found in the LICENSE file.
diff --git a/src/net/cgo_socknew.go.html b/src/net/cgo_socknew.go.html
index 6e92121df7a..841335805c7 100644
--- a/src/net/cgo_socknew.go.html
+++ b/src/net/cgo_socknew.go.html
@@ -42,7 +42,7 @@
// Code generated by cmd/cgo; DO NOT EDIT.
-//line /usr/local/go/src/net/cgo_socknew.go:1:1
+//line /opt/hostedtoolcache/go/1.26.4/x64/src/net/cgo_socknew.go:1:1// Copyright 2015 The Go Authors. All rights reserved.// Use of this source code is governed by a BSD-style// license that can be found in the LICENSE file.
diff --git a/src/net/cgo_unix_cgo.go.html b/src/net/cgo_unix_cgo.go.html
index 732c6732f93..a8b151566bf 100644
--- a/src/net/cgo_unix_cgo.go.html
+++ b/src/net/cgo_unix_cgo.go.html
@@ -92,7 +92,7 @@
// Code generated by cmd/cgo; DO NOT EDIT.
-//line /usr/local/go/src/net/cgo_unix_cgo.go:1:1
+//line /opt/hostedtoolcache/go/1.26.4/x64/src/net/cgo_unix_cgo.go:1:1// Copyright 2022 The Go Authors. All rights reserved.// Use of this source code is governed by a BSD-style// license that can be found in the LICENSE file.
diff --git a/src/net/cgo_unix_cgo_res.go.html b/src/net/cgo_unix_cgo_res.go.html
index 87c141460fb..8c37419d5a8 100644
--- a/src/net/cgo_unix_cgo_res.go.html
+++ b/src/net/cgo_unix_cgo_res.go.html
@@ -48,7 +48,7 @@
// Code generated by cmd/cgo; DO NOT EDIT.
-//line /usr/local/go/src/runtime/cgo/cgo.go:1:1
+//line /opt/hostedtoolcache/go/1.26.4/x64/src/runtime/cgo/cgo.go:1:1// Copyright 2010 The Go Authors. All rights reserved.// Use of this source code is governed by a BSD-style// license that can be found in the LICENSE file.
diff --git a/statistics.html b/statistics.html
index 0e650f6fb19..c74d904094d 100644
--- a/statistics.html
+++ b/statistics.html
@@ -13,7 +13,7 @@
Packages
Total 304 packages, 196 of them are standard packages.
Total 4833 source files, 4743 of them are Go source files.
- Total 1577143 lines of Go code.
+ Total 1577182 lines of Go code.
Averagely,
- each Go source file imports 7.18 packages and contains 333 lines of code.
- each package depends 6.68 other packages and contains 15.60 source files.
@@ -24,33 +24,33 @@
0(461)
-
+1
-(396)
+(397)2(246)
-
+3
-(230)
-
+(229)
+4
-(143)
-
+(142)
+5
-(115)
+(116)6(77)7(45)
-
+8
-(27)
-
+(26)
+9
-(26)
+(27)10(2918)
@@ -162,12 +162,12 @@
15(3)
-
+16
-(2)
-
+(1)
+17
-(4)
+(5)18(1)
@@ -221,8 +221,8 @@
github.com/refraction-networking/utls
Types
- Total 5698 exported type names, 28 of them are aliases.
- In them, 5509 are composite types and 189 are basic types.
+ Total 5699 exported type names, 28 of them are aliases.
+ In them, 5510 are composite types and 189 are basic types.
In the basic types, 167 are integers (85 are unsigneds).
- In 3587 exported struct types, 68 have embedded fields,
+ In 3588 exported struct types, 68 have embedded fields,
and 59 have promoted fields.
