The FIPS Compliance of HKDF

Accumulated test vectors make it possible to run large sets of random known-answer tests without checking in large assets.

ML-KEM private key seeds are vastly preferable to expanded decapsulation keys as a storage format. A plea to standardize on them.

The age plugin system allows integrating third-party recipient types at the CLI level. A new framework makes it easy to implement plugins.

Announcing Geomys, a small firm of professional maintainers with a portfolio of critical Go projects.

XAES-256-GCM is a new AEAD extended-nonce algorithm designed for high-level APIs and FIPS 140 compliance.