Skip to content

[release-branch.go1.26] Bump go-crypto-winnative to latest - #2467

Open
Quim Muntal (qmuntal) wants to merge 1 commit into
microsoft/release-branch.go1.26from
dev/qmuntal/update-winnative-go1.26
Open

[release-branch.go1.26] Bump go-crypto-winnative to latest#2467
Quim Muntal (qmuntal) wants to merge 1 commit into
microsoft/release-branch.go1.26from
dev/qmuntal/update-winnative-go1.26

Conversation

@qmuntal

Copy link
Copy Markdown
Member

Updates go-crypto-winnative from 832b168a84e9 to 418c3f76f8f8.

Tests:

  • pwsh eng/run.ps1 submodule-refresh -shallow
  • pwsh eng/run.ps1 build
  • go test github.com/microsoft/go-crypto-winnative/cng/...
  • GOEXPERIMENT=systemcrypto go test crypto/internal/backend/...

Copilot AI lite review requested due to automatic review settings August 21, 2026 14:47
@qmuntal
Quim Muntal (qmuntal) requested a review from a team as a code owner August 21, 2026 14:47
@azure-pipelines

Copy link
Copy Markdown
Azure Pipelines:
Successfully started running 1 pipeline(s).
There may be pipelines that require an authorized user to comment /azp run to run.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates the vendored external dependency set to bump github.com/microsoft/go-crypto-winnative from 832b168a84e9 to 418c3f76f8f8 on the release-branch.go1.26 branch, aligning the Go tree’s vendored crypto backend dependencies with the newer upstream revision.

Changes:

  • Bumped go-crypto-winnative version in the vendoring patch (including src/go.mod, src/go.sum, and src/vendor/modules.txt updates within the patch).
  • Updated vendored CNG implementation content (notably adding ML-DSA support and other API/implementation updates in the vendored tree captured by the patch).
  • Updated/added vendored internal bcrypt structures and constants (including arch-specific struct layout handling).
Show a summary per file
File Description
patches/0001-Vendor-external-dependencies.patch Updates the vendoring patch contents to the newer go-crypto-winnative revision and associated vendored files/metadata.

Review details

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Suppressed comments (1)

patches/0001-Vendor-external-dependencies.patch:36830

  • PublicKeyMLDSA.Bytes returns a slice backed by the key's internal array, so callers can mutate the key object by modifying the returned slice. Return a copy to keep the PublicKeyMLDSA value immutable.
  • Files reviewed: 1/1 changed files
  • Comments generated: 2
  • Review effort level: Lite

Comment on lines 37333 to 37337
@@ -36902,6 +37337,7 @@ index 00000000000000..5466b180e60e5a
+ out := make([]byte, keyLen)
Comment on lines +36768 to +36770
+func (key *PrivateKeyMLDSA) Bytes() []byte {
+ return key.seed[:]
+}

@dagood Davis Goodin (dagood) left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This could be fine, but when we do have support branches I would default to sticking with them.

+ github.com/microsoft/go-crypto-darwin v0.0.3-0.20260612173401-95c9561b6f25
+ github.com/microsoft/go-crypto-openssl v0.0.0-20260709090821-4e7f148608fd
+ github.com/microsoft/go-crypto-winnative v0.0.0-20260127024749-832b168a84e9
+ github.com/microsoft/go-crypto-winnative v0.0.0-20260821094543-418c3f76f8f8

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Doesn't match tip of ms-go1.26-support, d3f2d4e543ce11be5e0da39c242233f48e3c4838 ?

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants