@ttsc/win32-arm64 0.33.1 → 0.34.0

package/bin/go/src/crypto/internal/fips140/subtle/xor_riscv64.s

@@ -4,10 +4,12 @@
 
 //go:build !purego
 
+#include "asm_riscv64.h"
+#include "go_asm.h"
 #include "textflag.h"
 
-// func xorBytes(dst, a, b *byte, n int)
-TEXT ·xorBytes(SB), NOSPLIT|NOFRAME, $0
+// func xorBytesRISCV64(dst, a, b *byte, n int, hasV bool)
+TEXT ·xorBytesRISCV64(SB), NOSPLIT|NOFRAME, $0
 	MOV	dst+0(FP), X10
 	MOV	a+8(FP), X11
 	MOV	b+16(FP), X12
@@ -16,6 +18,35 @@ TEXT ·xorBytes(SB), NOSPLIT|NOFRAME, $0
 	MOV	$32, X15
 	BLT	X13, X15, loop4_check
 
+#ifndef hasV
+	MOVB	hasV+32(FP), X5
+	BEQZ	X5, xorbytes_scalar
+#endif
+
+	// Use vector if not 8 byte aligned.
+	OR	X10, X11, X5
+	AND	$7, X5
+	BNEZ	X5, vector_loop
+
+	// Use scalar if 8 byte aligned and <= 64 bytes.
+	SUB	$64, X12, X6
+	BLEZ	X6, loop64_check
+
+	PCALIGN	$16
+vector_loop:
+	VSETVLI X13, E8, M8, TU, MU, X15
+	VLE8V	(X11), V8
+	VLE8V	(X12), V16
+	VXORVV	V8, V16, V24
+	VSE8V	V24, (X10)
+	ADD	X15, X10
+	ADD	X15, X11
+	ADD	X15, X12
+	SUB	X15, X13
+	BNEZ	X13, vector_loop
+	RET
+
+xorbytes_scalar:
 	// Check alignment - if alignment differs we have to do one byte at a time.
 	AND	$7, X10, X5
 	AND	$7, X11, X6

package/bin/go/src/crypto/internal/fips140deps/cpu/cpu.go

@@ -27,6 +27,8 @@ var (
 	LOONG64HasLSX  = cpu.Loong64.HasLSX
 	LOONG64HasLASX = cpu.Loong64.HasLASX
 
+	RISCV64HasV = cpu.RISCV64.HasV
+
 	S390XHasAES    = cpu.S390X.HasAES
 	S390XHasAESCBC = cpu.S390X.HasAESCBC
 	S390XHasAESCTR = cpu.S390X.HasAESCTR

package/bin/go/src/crypto/internal/fips140deps/time/time.go

@@ -6,9 +6,9 @@
 
 package time
 
-import "time"
-
-var start = time.Now()
+import (
+	_ "unsafe"
+)
 
 // HighPrecisionNow returns a high-resolution timestamp suitable for measuring
 // small time differences. It uses the time package's monotonic clock.
@@ -17,5 +17,8 @@ var start = time.Now()
 // assumed to be sufficiently precise to measure time differences on the order
 // of tens to hundreds of nanoseconds.
 func HighPrecisionNow() int64 {
-	return int64(time.Since(start))
+	return monoTime()
 }
+
+//go:linkname monoTime
+func monoTime() int64

package/bin/go/src/crypto/internal/fips140only/fips140only.go

@@ -6,12 +6,10 @@ package fips140only
 
 import (
 	"crypto/fips140"
-	"crypto/internal/fips140/drbg"
 	"crypto/internal/fips140/sha256"
 	"crypto/internal/fips140/sha3"
 	"crypto/internal/fips140/sha512"
 	"hash"
-	"io"
 )
 
 // Enforced reports whether FIPS 140-only mode is enabled and enforced, in which non-approved
@@ -28,8 +26,3 @@ func ApprovedHash(h hash.Hash) bool {
 		return false
 	}
 }
-
-func ApprovedRandomReader(r io.Reader) bool {
-	_, ok := r.(drbg.DefaultReader)
-	return ok
-}

package/bin/go/src/crypto/internal/fips140only/random_fips140v1.0.go

@@ -0,0 +1,17 @@
+// Copyright 2026 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+//go:build fips140v1.0 || fips140v1.26
+
+package fips140only
+
+import (
+	"crypto/internal/fips140/drbg"
+	"io"
+)
+
+func ApprovedRandomReader(r io.Reader) bool {
+	_, ok := r.(drbg.DefaultReader)
+	return ok
+}

package/bin/go/src/crypto/internal/fips140only/random_fips140v1.28.go

@@ -0,0 +1,16 @@
+// Copyright 2026 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+//go:build !(fips140v1.0 || fips140v1.26)
+
+package fips140only
+
+import (
+	"crypto/internal/fips140/drbg"
+	"io"
+)
+
+func ApprovedRandomReader(r io.Reader) bool {
+	return drbg.IsDefaultReader(r)
+}

package/bin/go/src/crypto/internal/fips140test/acvp_capabilities_fips140v1.28.json

@@ -0,0 +1,86 @@
+[
+  {"algorithm":"SHA2-224","messageLength":[{"increment":8,"max":65528,"min":0}],"revision":"1.0"},
+  {"algorithm":"SHA2-256","messageLength":[{"increment":8,"max":65528,"min":0}],"revision":"1.0"},
+  {"algorithm":"SHA2-384","messageLength":[{"increment":8,"max":65528,"min":0}],"revision":"1.0"},
+  {"algorithm":"SHA2-512","messageLength":[{"increment":8,"max":65528,"min":0}],"revision":"1.0"},
+  {"algorithm":"SHA2-512/224","messageLength":[{"increment":8,"max":65528,"min":0}],"revision":"1.0"},
+  {"algorithm":"SHA2-512/256","messageLength":[{"increment":8,"max":65528,"min":0}],"revision":"1.0"},
+
+  {"algorithm":"SHA3-224","messageLength":[{"increment":8,"max":65528,"min":0}],"revision":"2.0"},
+  {"algorithm":"SHA3-256","messageLength":[{"increment":8,"max":65528,"min":0}],"revision":"2.0"},
+  {"algorithm":"SHA3-384","messageLength":[{"increment":8,"max":65528,"min":0}],"revision":"2.0"},
+  {"algorithm":"SHA3-512","messageLength":[{"increment":8,"max":65528,"min":0}],"revision":"2.0"},
+
+  {"algorithm":"SHAKE-128","inBit":false,"outBit":false,"inEmpty":true,"outputLen":[{"min":16,"max":65536,"increment":8}],"revision":"1.0"},
+  {"algorithm":"SHAKE-256","inBit":false,"outBit":false,"inEmpty":true,"outputLen":[{"min":16,"max":65536,"increment":8}],"revision":"1.0"},
+  {"algorithm":"cSHAKE-128","hexCustomization":false,"outputLen":[{"min":16,"max":65536,"increment":8}],"msgLen":[{"min":0,"max":65536,"increment":8}],"revision":"1.0"},
+  {"algorithm":"cSHAKE-256","hexCustomization":false,"outputLen":[{"min":16,"max":65536,"increment":8}],"msgLen":[{"min":0,"max":65536,"increment":8}],"revision":"1.0"},
+
+  {"algorithm":"HMAC-SHA2-224","keyLen":[{"increment":8,"max":524288,"min":8}],"macLen":[224],"revision":"1.0"},
+  {"algorithm":"HMAC-SHA2-256","keyLen":[{"increment":8,"max":524288,"min":8}],"macLen":[256],"revision":"1.0"},
+  {"algorithm":"HMAC-SHA2-384","keyLen":[{"increment":8,"max":524288,"min":8}],"macLen":[384],"revision":"1.0"},
+  {"algorithm":"HMAC-SHA2-512","keyLen":[{"increment":8,"max":524288,"min":8}],"macLen":[512],"revision":"1.0"},
+  {"algorithm":"HMAC-SHA2-512/224","keyLen":[{"increment":8,"max":524288,"min":8}],"macLen":[224],"revision":"1.0"},
+  {"algorithm":"HMAC-SHA2-512/256","keyLen":[{"increment":8,"max":524288,"min":8}],"macLen":[256],"revision":"1.0"},
+
+  {"algorithm":"HMAC-SHA3-224","keyLen":[{"increment":8,"max":524288,"min":8}],"macLen":[224],"revision":"1.0"},
+  {"algorithm":"HMAC-SHA3-256","keyLen":[{"increment":8,"max":524288,"min":8}],"macLen":[256],"revision":"1.0"},
+  {"algorithm":"HMAC-SHA3-384","keyLen":[{"increment":8,"max":524288,"min":8}],"macLen":[384],"revision":"1.0"},
+  {"algorithm":"HMAC-SHA3-512","keyLen":[{"increment":8,"max":524288,"min":8}],"macLen":[512],"revision":"1.0"},
+
+  {"algorithm":"KDA","mode":"HKDF","revision":"Sp800-56Cr1","fixedInfoPattern":"uPartyInfo||vPartyInfo","encoding":["concatenation"],"hmacAlg":["SHA2-224","SHA2-256","SHA2-384","SHA2-512","SHA2-512/224","SHA2-512/256","SHA3-224","SHA3-256","SHA3-384","SHA3-512"],"macSaltMethods":["default","random"],"l":2048,"z":[{"min":224,"max":65336,"increment":8}]},
+  {"algorithm":"KDA","mode":"OneStepNoCounter","revision":"Sp800-56Cr2","auxFunctions":[{"auxFunctionName":"HMAC-SHA2-224","l":224,"macSaltMethods":["default","random"]},{"auxFunctionName":"HMAC-SHA2-256","l":256,"macSaltMethods":["default","random"]},{"auxFunctionName":"HMAC-SHA2-384","l":384,"macSaltMethods":["default","random"]},{"auxFunctionName":"HMAC-SHA2-512","l":512,"macSaltMethods":["default","random"]},{"auxFunctionName":"HMAC-SHA2-512/224","l":224,"macSaltMethods":["default","random"]},{"auxFunctionName":"HMAC-SHA2-512/256","l":256,"macSaltMethods":["default","random"]},{"auxFunctionName":"HMAC-SHA3-224","l":224,"macSaltMethods":["default","random"]},{"auxFunctionName":"HMAC-SHA3-256","l":256,"macSaltMethods":["default","random"]},{"auxFunctionName":"HMAC-SHA3-384","l":384,"macSaltMethods":["default","random"]},{"auxFunctionName":"HMAC-SHA3-512","l":512,"macSaltMethods":["default","random"]}],"fixedInfoPattern":"uPartyInfo||vPartyInfo","encoding":["concatenation"],"z":[{"min":224,"max":65336,"increment":8}]},
+
+  {"algorithm":"PBKDF","capabilities":[{"iterationCount":[{"min":1,"max":10000,"increment":1}],"keyLen":[{"min":112,"max":4096,"increment":8}],"passwordLen":[{"min":8,"max":64,"increment":1}],"saltLen":[{"min":128,"max":512,"increment":8}],"hmacAlg":["SHA2-224","SHA2-256","SHA2-384","SHA2-512","SHA2-512/224","SHA2-512/256","SHA3-224","SHA3-256","SHA3-384","SHA3-512"]}],"revision":"1.0"},
+
+  {"algorithm":"ML-KEM","mode":"keyGen","revision":"FIPS203","parameterSets":["ML-KEM-768","ML-KEM-1024"]},
+  {"algorithm":"ML-KEM","mode":"encapDecap","revision":"FIPS203","parameterSets":["ML-KEM-768","ML-KEM-1024"],"functions":["encapsulation","decapsulation"]},
+
+  {"algorithm":"ML-DSA","mode":"keyGen","revision":"FIPS204","parameterSets":["ML-DSA-44","ML-DSA-65","ML-DSA-87"]},
+  {"algorithm":"ML-DSA","mode":"sigGen","revision":"FIPS204","signatureInterfaces":["internal","external"],"preHash":["pure"],"deterministic":[true,false],"externalMu":[true],"capabilities":[{"parameterSets":["ML-DSA-44","ML-DSA-65","ML-DSA-87"],"messageLength":[{"min":8,"max":65536,"increment":8}],"contextLength":[{"min":0,"max":2040,"increment":8}]}]},
+  {"algorithm":"ML-DSA","mode":"sigVer","revision":"FIPS204","signatureInterfaces":["internal","external"],"externalMu":[true],"preHash":["pure"],"capabilities":[{"parameterSets":["ML-DSA-44","ML-DSA-65","ML-DSA-87"],"messageLength":[{"min":8,"max":65536,"increment":8}],"contextLength":[{"min":0,"max":2040,"increment":8}]}]},
+
+  {"algorithm":"hmacDRBG","revision":"1.0","predResistanceEnabled":[false],"reseedImplemented":false,"capabilities":[{"mode":"SHA2-224","derFuncEnabled":false,"entropyInputLen":[192],"nonceLen":[96],"persoStringLen":[192],"additionalInputLen":[0],"returnedBitsLen":224}]},
+  {"algorithm":"hmacDRBG","revision":"1.0","predResistanceEnabled":[false],"reseedImplemented":false,"capabilities":[{"mode":"SHA2-256","derFuncEnabled":false,"entropyInputLen":[256],"nonceLen":[128],"persoStringLen":[256],"additionalInputLen":[0],"returnedBitsLen":256}]},
+  {"algorithm":"hmacDRBG","revision":"1.0","predResistanceEnabled":[false],"reseedImplemented":false,"capabilities":[{"mode":"SHA2-384","derFuncEnabled":false,"entropyInputLen":[256],"nonceLen":[128],"persoStringLen":[256],"additionalInputLen":[0],"returnedBitsLen":384}]},
+  {"algorithm":"hmacDRBG","revision":"1.0","predResistanceEnabled":[false],"reseedImplemented":false,"capabilities":[{"mode":"SHA2-512","derFuncEnabled":false,"entropyInputLen":[256],"nonceLen":[128],"persoStringLen":[256],"additionalInputLen":[0],"returnedBitsLen":512}]},
+  {"algorithm":"hmacDRBG","revision":"1.0","predResistanceEnabled":[false],"reseedImplemented":false,"capabilities":[{"mode":"SHA2-512/224","derFuncEnabled":false,"entropyInputLen":[192],"nonceLen":[96],"persoStringLen":[192],"additionalInputLen":[0],"returnedBitsLen":224}]},
+  {"algorithm":"hmacDRBG","revision":"1.0","predResistanceEnabled":[false],"reseedImplemented":false,"capabilities":[{"mode":"SHA2-512/256","derFuncEnabled":false,"entropyInputLen":[256],"nonceLen":[128],"persoStringLen":[256],"additionalInputLen":[0],"returnedBitsLen":256}]},
+  {"algorithm":"hmacDRBG","revision":"1.0","predResistanceEnabled":[false],"reseedImplemented":false,"capabilities":[{"mode":"SHA3-224","derFuncEnabled":false,"entropyInputLen":[192],"nonceLen":[96],"persoStringLen":[192],"additionalInputLen":[0],"returnedBitsLen":224}]},
+  {"algorithm":"hmacDRBG","revision":"1.0","predResistanceEnabled":[false],"reseedImplemented":false,"capabilities":[{"mode":"SHA3-256","derFuncEnabled":false,"entropyInputLen":[256],"nonceLen":[128],"persoStringLen":[256],"additionalInputLen":[0],"returnedBitsLen":256}]},
+  {"algorithm":"hmacDRBG","revision":"1.0","predResistanceEnabled":[false],"reseedImplemented":false,"capabilities":[{"mode":"SHA3-384","derFuncEnabled":false,"entropyInputLen":[256],"nonceLen":[128],"persoStringLen":[256],"additionalInputLen":[0],"returnedBitsLen":384}]},
+  {"algorithm":"hmacDRBG","revision":"1.0","predResistanceEnabled":[false],"reseedImplemented":false,"capabilities":[{"mode":"SHA3-512","derFuncEnabled":false,"entropyInputLen":[256],"nonceLen":[128],"persoStringLen":[256],"additionalInputLen":[0],"returnedBitsLen":512}]},
+
+  {"algorithm":"ctrDRBG","revision":"1.0","predResistanceEnabled":[false],"reseedImplemented":true,"capabilities":[{"mode":"AES-256","derFuncEnabled":false,"entropyInputLen":[384],"nonceLen":[0],"persoStringLen":[0],"additionalInputLen":[384],"returnedBitsLen":128}]},
+
+  {"algorithm":"EDDSA","mode":"keyGen","revision":"1.0","curve":["ED-25519"]},
+  {"algorithm":"EDDSA","mode":"keyVer","revision":"1.0","curve":["ED-25519"]},
+  {"algorithm":"EDDSA","mode":"sigGen","revision":"1.0","pure":true,"preHash":true,"contextLength":[{"min":0,"max":255,"increment":1}],"curve":["ED-25519"]},
+  {"algorithm":"EDDSA","mode":"sigVer","revision":"1.0","pure":true,"preHash":true,"curve":["ED-25519"]},
+
+  {"algorithm":"ECDSA","mode":"keyGen","revision":"FIPS186-5","curve":["P-224","P-256","P-384","P-521"],"secretGenerationMode":["testing candidates"]},
+  {"algorithm":"ECDSA","mode":"keyVer","revision":"FIPS186-5","curve":["P-224","P-256","P-384","P-521"]},
+  {"algorithm":"ECDSA","mode":"sigGen","revision":"FIPS186-5","capabilities":[{"curve":["P-224","P-256","P-384","P-521"],"hashAlg":["SHA2-224","SHA2-256","SHA2-384","SHA2-512","SHA2-512/224","SHA2-512/256","SHA3-224","SHA3-256","SHA3-384","SHA3-512"]}]},
+  {"algorithm":"ECDSA","mode":"sigVer","revision":"FIPS186-5","capabilities":[{"curve":["P-224","P-256","P-384","P-521"],"hashAlg":["SHA2-224","SHA2-256","SHA2-384","SHA2-512","SHA2-512/224","SHA2-512/256","SHA3-224","SHA3-256","SHA3-384","SHA3-512"]}]},
+  {"algorithm":"DetECDSA","mode":"sigGen","revision":"FIPS186-5","capabilities":[{"curve":["P-224","P-256","P-384","P-521"],"hashAlg":["SHA2-224","SHA2-256","SHA2-384","SHA2-512","SHA2-512/224","SHA2-512/256","SHA3-224","SHA3-256","SHA3-384","SHA3-512"]}]},
+
+  {"algorithm":"ACVP-AES-CBC","direction":["encrypt","decrypt"],"keyLen":[128,192,256],"revision":"1.0"},
+  {"algorithm":"ACVP-AES-CTR","direction":["encrypt","decrypt"],"keyLen":[128,192,256],"payloadLen":[{"min":8,"max":128,"increment":8}],"incrementalCounter":true,"overflowCounter":true,"performCounterTests":true,"revision":"1.0"},
+  {"algorithm":"ACVP-AES-GCM","direction":["encrypt","decrypt"],"keyLen":[128,192,256],"payloadLen":[{"min":0,"max":65536,"increment":8}],"aadLen":[{"min":0,"max":65536,"increment":8}],"tagLen":[96,104,112,120,128],"ivLen":[96],"ivGen":"external","revision":"1.0"},
+  {"algorithm":"ACVP-AES-GCM","direction":["encrypt","decrypt"],"keyLen":[128,192,256],"payloadLen":[{"min":0,"max":65536,"increment":8}],"aadLen":[{"min":0,"max":65536,"increment":8}],"tagLen":[128],"ivLen":[96],"ivGen":"internal","ivGenMode":"8.2.2","revision":"1.0"},
+  {"algorithm":"CMAC-AES","capabilities":[{"direction":["gen","ver"],"msgLen":[{"min":0,"max":524288,"increment":8}],"keyLen":[128,256],"macLen":[128]}],"revision":"1.0"},
+
+  {"algorithm":"TLS-v1.2","mode":"KDF","revision":"RFC7627","hashAlg":["SHA2-256","SHA2-384","SHA2-512"]},
+  {"algorithm":"TLS-v1.3","mode":"KDF","revision":"RFC8446","hmacAlg":["SHA2-256","SHA2-384"],"runningMode":["DHE","PSK","PSK-DHE"]},
+  {"algorithm":"kdf-components","mode":"ssh","revision":"1.0","hashAlg":["SHA2-224","SHA2-256","SHA2-384","SHA2-512"],"cipher":["AES-128","AES-192","AES-256"]},
+
+  {"algorithm":"KAS-ECC-SSC","revision":"Sp800-56Ar3","scheme":{"ephemeralUnified":{"kasRole":["initiator","responder"]},"staticUnified":{"kasRole":["initiator","responder"]}},"domainParameterGenerationMethods":["P-224","P-256","P-384","P-521"]},
+
+  {"algorithm":"KDF","revision":"1.0","capabilities":[{"kdfMode":"counter","macMode":["CMAC-AES128","CMAC-AES192","CMAC-AES256"],"supportedLengths":[256],"fixedDataOrder":["before fixed data"],"counterLength":[16]},{"kdfMode":"feedback","macMode":["HMAC-SHA2-224","HMAC-SHA2-256","HMAC-SHA2-384","HMAC-SHA2-512","HMAC-SHA2-512/224","HMAC-SHA2-512/256","HMAC-SHA3-224","HMAC-SHA3-256","HMAC-SHA3-384","HMAC-SHA3-512"],"customKeyInLength":0,"supportedLengths":[{"min":8,"max":4096,"increment":8}],"fixedDataOrder":["after fixed data"],"counterLength":[8],"supportsEmptyIv":true,"requiresEmptyIv":true}]},
+
+  {"algorithm":"RSA","mode":"keyGen","revision":"FIPS186-5","infoGeneratedByServer":true,"pubExpMode":"fixed","fixedPubExp":"010001","keyFormat":"crt","capabilities":[{"randPQ":"probable","properties":[{"modulo":2048,"primeTest":["2powSecStr"]},{"modulo":3072,"primeTest":["2powSecStr"]},{"modulo":4096,"primeTest":["2powSecStr"]},{"modulo":6144,"primeTest":["2powSecStr"]},{"modulo":8192,"primeTest":["2powSecStr"]}]}]},
+  {"algorithm":"RSA","mode":"sigGen","revision":"FIPS186-5","capabilities":[{"sigType":"pkcs1v1.5","properties":[{"modulo":2048,"hashPair":[{"hashAlg":"SHA2-224"},{"hashAlg":"SHA2-256"},{"hashAlg":"SHA2-384"},{"hashAlg":"SHA2-512"},{"hashAlg":"SHA2-512/224"},{"hashAlg":"SHA2-512/256"},{"hashAlg":"SHA3-224"},{"hashAlg":"SHA3-256"},{"hashAlg":"SHA3-384"},{"hashAlg":"SHA3-512"}]},{"modulo":3072,"hashPair":[{"hashAlg":"SHA2-224"},{"hashAlg":"SHA2-256"},{"hashAlg":"SHA2-384"},{"hashAlg":"SHA2-512"},{"hashAlg":"SHA2-512/224"},{"hashAlg":"SHA2-512/256"},{"hashAlg":"SHA3-224"},{"hashAlg":"SHA3-256"},{"hashAlg":"SHA3-384"},{"hashAlg":"SHA3-512"}]},{"modulo":4096,"hashPair":[{"hashAlg":"SHA2-224"},{"hashAlg":"SHA2-256"},{"hashAlg":"SHA2-384"},{"hashAlg":"SHA2-512"},{"hashAlg":"SHA2-512/224"},{"hashAlg":"SHA2-512/256"},{"hashAlg":"SHA3-224"},{"hashAlg":"SHA3-256"},{"hashAlg":"SHA3-384"},{"hashAlg":"SHA3-512"}]}]},{"sigType":"pss","properties":[{"maskFunction":["mgf1"],"modulo":2048,"hashPair":[{"hashAlg":"SHA2-224","saltLen":28},{"hashAlg":"SHA2-224"},{"hashAlg":"SHA2-256","saltLen":32},{"hashAlg":"SHA2-256"},{"hashAlg":"SHA2-384","saltLen":48},{"hashAlg":"SHA2-384"},{"hashAlg":"SHA2-512","saltLen":64},{"hashAlg":"SHA2-512"},{"hashAlg":"SHA2-512/224","saltLen":28},{"hashAlg":"SHA2-512/224"},{"hashAlg":"SHA2-512/256","saltLen":32},{"hashAlg":"SHA2-512/256"},{"hashAlg":"SHA3-224","saltLen":28},{"hashAlg":"SHA3-224"},{"hashAlg":"SHA3-256","saltLen":32},{"hashAlg":"SHA3-256"},{"hashAlg":"SHA3-384","saltLen":48},{"hashAlg":"SHA3-384"},{"hashAlg":"SHA3-512","saltLen":64},{"hashAlg":"SHA3-512"}]},{"maskFunction":["mgf1"],"modulo":3072,"hashPair":[{"hashAlg":"SHA2-224","saltLen":28},{"hashAlg":"SHA2-224"},{"hashAlg":"SHA2-256","saltLen":32},{"hashAlg":"SHA2-256"},{"hashAlg":"SHA2-384","saltLen":48},{"hashAlg":"SHA2-384"},{"hashAlg":"SHA2-512","saltLen":64},{"hashAlg":"SHA2-512"},{"hashAlg":"SHA2-512/224","saltLen":28},{"hashAlg":"SHA2-512/224"},{"hashAlg":"SHA2-512/256","saltLen":32},{"hashAlg":"SHA2-512/256"},{"hashAlg":"SHA3-224","saltLen":28},{"hashAlg":"SHA3-224"},{"hashAlg":"SHA3-256","saltLen":32},{"hashAlg":"SHA3-256"},{"hashAlg":"SHA3-384","saltLen":48},{"hashAlg":"SHA3-384"},{"hashAlg":"SHA3-512","saltLen":64},{"hashAlg":"SHA3-512"}]},{"maskFunction":["mgf1"],"modulo":4096,"hashPair":[{"hashAlg":"SHA2-224","saltLen":28},{"hashAlg":"SHA2-224"},{"hashAlg":"SHA2-256","saltLen":32},{"hashAlg":"SHA2-256"},{"hashAlg":"SHA2-384","saltLen":48},{"hashAlg":"SHA2-384"},{"hashAlg":"SHA2-512","saltLen":64},{"hashAlg":"SHA2-512"},{"hashAlg":"SHA2-512/224","saltLen":28},{"hashAlg":"SHA2-512/224"},{"hashAlg":"SHA2-512/256","saltLen":32},{"hashAlg":"SHA2-512/256"},{"hashAlg":"SHA3-224","saltLen":28},{"hashAlg":"SHA3-224"},{"hashAlg":"SHA3-256","saltLen":32},{"hashAlg":"SHA3-256"},{"hashAlg":"SHA3-384","saltLen":48},{"hashAlg":"SHA3-384"},{"hashAlg":"SHA3-512","saltLen":64},{"hashAlg":"SHA3-512"}]}]}]},
+  {"algorithm":"RSA","mode":"sigVer","revision":"FIPS186-5","pubExpMode":"random","capabilities":[{"sigType":"pkcs1v1.5","properties":[{"modulo":2048,"hashPair":[{"hashAlg":"SHA2-224"},{"hashAlg":"SHA2-256"},{"hashAlg":"SHA2-384"},{"hashAlg":"SHA2-512"},{"hashAlg":"SHA2-512/224"},{"hashAlg":"SHA2-512/256"}]}]},{"sigType":"pkcs1v1.5","properties":[{"modulo":3072,"hashPair":[{"hashAlg":"SHA2-224"},{"hashAlg":"SHA2-256"},{"hashAlg":"SHA2-384"},{"hashAlg":"SHA2-512"},{"hashAlg":"SHA2-512/224"},{"hashAlg":"SHA2-512/256"}]}]},{"sigType":"pkcs1v1.5","properties":[{"modulo":4096,"hashPair":[{"hashAlg":"SHA2-224"},{"hashAlg":"SHA2-256"},{"hashAlg":"SHA2-384"},{"hashAlg":"SHA2-512"},{"hashAlg":"SHA2-512/224"},{"hashAlg":"SHA2-512/256"}]}]},{"sigType":"pss","properties":[{"maskFunction":["mgf1"],"modulo":2048,"hashPair":[{"hashAlg":"SHA2-224","saltLen":28},{"hashAlg":"SHA2-224"},{"hashAlg":"SHA2-256","saltLen":32},{"hashAlg":"SHA2-256"},{"hashAlg":"SHA2-384","saltLen":48},{"hashAlg":"SHA2-384"},{"hashAlg":"SHA2-512","saltLen":64},{"hashAlg":"SHA2-512"},{"hashAlg":"SHA2-512/224","saltLen":28},{"hashAlg":"SHA2-512/224"},{"hashAlg":"SHA2-512/256","saltLen":32},{"hashAlg":"SHA2-512/256"}]}]},{"sigType":"pss","properties":[{"maskFunction":["mgf1"],"modulo":3072,"hashPair":[{"hashAlg":"SHA2-224","saltLen":28},{"hashAlg":"SHA2-224"},{"hashAlg":"SHA2-256","saltLen":32},{"hashAlg":"SHA2-256"},{"hashAlg":"SHA2-384","saltLen":48},{"hashAlg":"SHA2-384"},{"hashAlg":"SHA2-512","saltLen":64},{"hashAlg":"SHA2-512"},{"hashAlg":"SHA2-512/224","saltLen":28},{"hashAlg":"SHA2-512/224"},{"hashAlg":"SHA2-512/256","saltLen":32},{"hashAlg":"SHA2-512/256"}]}]},{"sigType":"pss","properties":[{"maskFunction":["mgf1"],"modulo":4096,"hashPair":[{"hashAlg":"SHA2-224","saltLen":28},{"hashAlg":"SHA2-224"},{"hashAlg":"SHA2-256","saltLen":32},{"hashAlg":"SHA2-256"},{"hashAlg":"SHA2-384","saltLen":48},{"hashAlg":"SHA2-384"},{"hashAlg":"SHA2-512","saltLen":64},{"hashAlg":"SHA2-512"},{"hashAlg":"SHA2-512/224","saltLen":28},{"hashAlg":"SHA2-512/224"},{"hashAlg":"SHA2-512/256","saltLen":32},{"hashAlg":"SHA2-512/256"}]}]}]},
+
+  {"algorithm":"KTS-IFC","revision":"Sp800-56Br2","iutId":"C0FFEE","modulo":[2048,3072,4096,6144,8192],"keyGenerationMethods":["rsakpg2-crt"],"scheme":{"KTS-OAEP-basic":{"l":1024,"kasRole":["responder","initiator"],"ktsMethod":{"hashAlgs":["SHA2-224","SHA2-256","SHA2-384","SHA2-512","SHA2-512/224","SHA2-512/256","SHA3-224","SHA3-256","SHA3-384","SHA3-512"],"supportsNullAssociatedData":true,"encoding":["concatenation"]}}}}
+]

package/bin/go/src/crypto/internal/fips140test/acvp_test_fips140v1.28.config.json

@@ -0,0 +1,58 @@
+[
+  {"Wrapper": "go", "In": "vectors/SHA2-224.bz2", "Out": "expected/SHA2-224.bz2"},
+  {"Wrapper": "go", "In": "vectors/SHA2-256.bz2", "Out": "expected/SHA2-256.bz2"},
+  {"Wrapper": "go", "In": "vectors/SHA2-384.bz2", "Out": "expected/SHA2-384.bz2"},
+  {"Wrapper": "go", "In": "vectors/SHA2-512.bz2", "Out": "expected/SHA2-512.bz2"},
+  {"Wrapper": "go", "In": "vectors/SHA2-512-224.bz2", "Out": "expected/SHA2-512-224.bz2"},
+  {"Wrapper": "go", "In": "vectors/SHA2-512-256.bz2", "Out": "expected/SHA2-512-256.bz2"},
+
+  {"Wrapper": "go", "In": "vectors/SHA3-224.bz2", "Out": "expected/SHA3-224.bz2"},
+  {"Wrapper": "go", "In": "vectors/SHA3-256.bz2", "Out": "expected/SHA3-256.bz2"},
+  {"Wrapper": "go", "In": "vectors/SHA3-384.bz2", "Out": "expected/SHA3-384.bz2"},
+  {"Wrapper": "go", "In": "vectors/SHA3-512.bz2", "Out": "expected/SHA3-512.bz2"},
+
+  {"Wrapper": "go", "In": "vectors/SHAKE-128.bz2", "Out": "expected/SHAKE-128.bz2"},
+  {"Wrapper": "go", "In": "vectors/SHAKE-256.bz2", "Out": "expected/SHAKE-256.bz2"},
+  {"Wrapper": "go", "In": "vectors/cSHAKE-128.bz2", "Out": "expected/cSHAKE-128.bz2"},
+  {"Wrapper": "go", "In": "vectors/cSHAKE-256.bz2", "Out": "expected/cSHAKE-256.bz2"},
+
+  {"Wrapper": "go", "In": "vectors/HMAC-SHA2-224.bz2", "Out": "expected/HMAC-SHA2-224.bz2"},
+  {"Wrapper": "go", "In": "vectors/HMAC-SHA2-256.bz2", "Out": "expected/HMAC-SHA2-256.bz2"},
+  {"Wrapper": "go", "In": "vectors/HMAC-SHA2-384.bz2", "Out": "expected/HMAC-SHA2-384.bz2"},
+  {"Wrapper": "go", "In": "vectors/HMAC-SHA2-512.bz2", "Out": "expected/HMAC-SHA2-512.bz2"},
+  {"Wrapper": "go", "In": "vectors/HMAC-SHA2-512-224.bz2", "Out": "expected/HMAC-SHA2-512-224.bz2"},
+  {"Wrapper": "go", "In": "vectors/HMAC-SHA2-512-256.bz2", "Out": "expected/HMAC-SHA2-512-256.bz2"},
+
+  {"Wrapper": "go", "In": "vectors/KDA.bz2", "Out": "expected/KDA.bz2"},
+
+  {"Wrapper": "go", "In": "vectors/HMAC-SHA3-224.bz2", "Out": "expected/HMAC-SHA3-224.bz2"},
+  {"Wrapper": "go", "In": "vectors/HMAC-SHA3-256.bz2", "Out": "expected/HMAC-SHA3-256.bz2"},
+  {"Wrapper": "go", "In": "vectors/HMAC-SHA3-384.bz2", "Out": "expected/HMAC-SHA3-384.bz2"},
+  {"Wrapper": "go", "In": "vectors/HMAC-SHA3-512.bz2", "Out": "expected/HMAC-SHA3-512.bz2"},
+
+  {"Wrapper": "go", "In": "vectors/PBKDF.bz2", "Out": "expected/PBKDF.bz2"},
+
+  {"Wrapper": "go", "In": "vectors/ML-KEM.bz2", "Out": "expected/ML-KEM.bz2"},
+  {"Wrapper": "go", "In": "vectors/ML-DSA.bz2", "Out": "expected/ML-DSA.bz2"},
+
+  {"Wrapper": "go", "In": "vectors/hmacDRBG.bz2", "Out": "expected/hmacDRBG.bz2"},
+
+  {"Wrapper": "go", "In": "vectors/ctrDRBG.bz2", "Out": "expected/ctrDRBG.bz2"},
+
+  {"Wrapper": "go", "In": "vectors/EDDSA.bz2", "Out": "expected/EDDSA.bz2"},
+
+  {"Wrapper": "go", "In": "vectors/ECDSA.bz2", "Out": "expected/ECDSA.bz2"},
+
+  {"Wrapper": "go", "In": "vectors/ACVP-AES-CBC.bz2", "Out": "expected/ACVP-AES-CBC.bz2"},
+  {"Wrapper": "go", "In": "vectors/ACVP-AES-CTR.bz2", "Out": "expected/ACVP-AES-CTR.bz2"},
+  {"Wrapper": "go", "In": "vectors/ACVP-AES-GCM.bz2", "Out": "expected/ACVP-AES-GCM.bz2"},
+
+  {"Wrapper": "go", "In": "vectors/CMAC-AES.bz2", "Out": "expected/CMAC-AES.bz2"},
+
+  {"Wrapper": "go", "In": "vectors/TLS-v1.2.bz2", "Out": "expected/TLS-v1.2.bz2"},
+  {"Wrapper": "go", "In": "vectors/TLS-v1.3.bz2", "Out": "expected/TLS-v1.3.bz2"},
+
+  {"Wrapper": "go", "In": "vectors/kdf-components.bz2", "Out": "expected/kdf-components.bz2"},
+
+  {"Wrapper": "go", "In": "vectors/RSA.v1.28.bz2", "Out": "expected/RSA.v1.28.bz2"}
+]

package/bin/go/src/crypto/internal/rand/rand.go

@@ -13,9 +13,11 @@ import (
 	_ "unsafe"
 )
 
-type reader struct {
-	drbg.DefaultReader
-}
+// defaultReader aliases [drbg.DefaultReader], so that [reader]
+// does not have an exported DefaultReader field.
+type defaultReader = drbg.DefaultReader
+
+type reader struct{ defaultReader }
 
 func (r reader) Read(b []byte) (n int, err error) {
 	if boring.Enabled {
@@ -40,34 +42,32 @@ var Reader io.Reader = reader{}
 //
 // SetTestingReader panics when building against Go Cryptographic Module v1.0.0.
 //
-// SetTestingReader is pulled by [testing/cryptotest.setGlobalRandom] via go:linkname.
+// SetTestingReader is pulled by [testing/cryptotest.SetGlobalRandom] via go:linkname.
 //
 //go:linkname SetTestingReader crypto/internal/rand.SetTestingReader
 func SetTestingReader(r io.Reader) {
+	testingReader = r
 	fips140SetTestingReader(r)
 }
 
+var testingReader io.Reader
+
 var cryptocustomrand = godebug.New("cryptocustomrand")
 
 // CustomReader returns [Reader] or, only if the GODEBUG setting
 // "cryptocustomrand=1" is set, the provided io.Reader.
 //
-// If returning a non-default Reader, it calls [randutil.MaybeReadByte] on it.
+// If returning a non-default Reader, it calls [randutil.MaybeReadByte] on it,
+// unless it's the global testing Reader set with [SetTestingReader].
 func CustomReader(r io.Reader) io.Reader {
 	if cryptocustomrand.Value() == "1" {
 		if !IsDefaultReader(r) {
-			randutil.MaybeReadByte(r)
+			if r != testingReader {
+				randutil.MaybeReadByte(r)
+			}
 			cryptocustomrand.IncNonDefault()
 		}
 		return r
 	}
 	return Reader
 }
-
-// IsDefaultReader reports whether r is the default [crypto/rand.Reader].
-//
-// If true, the Read method of r can be assumed to call [drbg.Read].
-func IsDefaultReader(r io.Reader) bool {
-	_, ok := r.(drbg.DefaultReader)
-	return ok
-}

package/bin/go/src/crypto/internal/rand/random_fips140v1.0.go

@@ -0,0 +1,20 @@
+// Copyright 2026 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+//go:build fips140v1.0 || fips140v1.26
+
+package rand
+
+import (
+	"crypto/internal/fips140/drbg"
+	"io"
+)
+
+// IsDefaultReader reports whether r is the default [crypto/rand.Reader].
+//
+// If true, the Read method of r can be assumed to call [drbg.Read].
+func IsDefaultReader(r io.Reader) bool {
+	_, ok := r.(drbg.DefaultReader)
+	return ok
+}

package/bin/go/src/crypto/internal/rand/random_fips140v1.28.go

@@ -0,0 +1,19 @@
+// Copyright 2026 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+//go:build !(fips140v1.0 || fips140v1.26)
+
+package rand
+
+import (
+	"crypto/internal/fips140/drbg"
+	"io"
+)
+
+// IsDefaultReader reports whether r is the default [crypto/rand.Reader].
+//
+// If true, the Read method of r can be assumed to call [drbg.Read].
+func IsDefaultReader(r io.Reader) bool {
+	return drbg.IsDefaultReader(r)
+}

package/bin/go/src/crypto/mldsa/mldsa.go

@@ -0,0 +1,97 @@
+// Copyright 2026 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+// Package mldsa implements the post-quantum ML-DSA signature scheme specified
+// in [FIPS 204].
+//
+// This package is unavailable if using the [FIPS 140-3 Go Cryptographic Module]
+// v1.0.0, in which case [GenerateKey], [NewPrivateKey], [NewPublicKey], and
+// [Verify] will return an error. It is available if using v1.26.0 or later.
+//
+// [FIPS 204]: https://nvlpubs.nist.gov/nistpubs/FIPS/NIST.FIPS.204.pdf
+// [FIPS 140-3 Go Cryptographic Module]: https://go.dev/doc/security/fips140
+package mldsa
+
+import "crypto"
+
+const (
+	PrivateKeySize = 32
+
+	MLDSA44PublicKeySize = 1312
+	MLDSA65PublicKeySize = 1952
+	MLDSA87PublicKeySize = 2592
+
+	MLDSA44SignatureSize = 2420
+	MLDSA65SignatureSize = 3309
+	MLDSA87SignatureSize = 4627
+)
+
+// Parameters represents one of the fixed parameter sets defined in FIPS 204.
+//
+// Most applications should use [MLDSA44].
+//
+// Multiple invocations of [MLDSA44], [MLDSA65], or [MLDSA87] will return the
+// same respective value, which can be used for equality checks and switch
+// statements. The returned value is safe for concurrent use.
+type Parameters struct {
+	name          string
+	publicKeySize int
+	signatureSize int
+}
+
+// MLDSA44 returns the ML-DSA-44 parameter set defined in FIPS 204.
+func MLDSA44() Parameters {
+	return Parameters{
+		name:          "ML-DSA-44",
+		publicKeySize: MLDSA44PublicKeySize,
+		signatureSize: MLDSA44SignatureSize,
+	}
+}
+
+// MLDSA65 returns the ML-DSA-65 parameter set defined in FIPS 204.
+func MLDSA65() Parameters {
+	return Parameters{
+		name:          "ML-DSA-65",
+		publicKeySize: MLDSA65PublicKeySize,
+		signatureSize: MLDSA65SignatureSize,
+	}
+}
+
+// MLDSA87 returns the ML-DSA-87 parameter set defined in FIPS 204.
+func MLDSA87() Parameters {
+	return Parameters{
+		name:          "ML-DSA-87",
+		publicKeySize: MLDSA87PublicKeySize,
+		signatureSize: MLDSA87SignatureSize,
+	}
+}
+
+// PublicKeySize returns the size of public keys for this parameter set, in bytes.
+func (params Parameters) PublicKeySize() int {
+	return params.publicKeySize
+}
+
+// SignatureSize returns the size of signatures for this parameter set, in bytes.
+func (params Parameters) SignatureSize() int {
+	return params.signatureSize
+}
+
+// String returns the name of the parameter set, e.g. "ML-DSA-44".
+func (params Parameters) String() string {
+	return params.name
+}
+
+// Options contains additional options for signing and verifying ML-DSA signatures.
+type Options struct {
+	// Context can be used to distinguish signatures created for different
+	// purposes. It must be at most 255 bytes long, and it is empty by default.
+	//
+	// The same context must be used when signing and verifying a signature.
+	Context string
+}
+
+// HashFunc returns zero, to implement the [crypto.SignerOpts] interface.
+func (opts *Options) HashFunc() crypto.Hash {
+	return 0
+}

package/bin/go/src/crypto/mldsa/mldsa_fips140v1.0.go

@@ -0,0 +1,116 @@
+// Copyright 2026 The Go Authors. All rights reserved.
+// Use of this source code is governed by a BSD-style
+// license that can be found in the LICENSE file.
+
+//go:build fips140v1.0
+
+package mldsa
+
+import (
+	"crypto"
+	"errors"
+	"io"
+)
+
+// This file provides stub implementations of the ML-DSA API for building
+// against the FIPS 140-3 Go Cryptographic Module v1.0.0, which does not include
+// ML-DSA. Top-level functions return an error, and methods are unreachable
+// since there is no way to construct a valid PublicKey or PrivateKey.
+
+var errUnavailable = errors.New("mldsa: unavailable in FIPS 140-3 Go Cryptographic Module v1.0.0")
+
+// PrivateKey is an in-memory ML-DSA private key. It implements [crypto.Signer]
+// and the informal extended [crypto.PrivateKey] interface.
+//
+// A PrivateKey is safe for concurrent use.
+type PrivateKey struct{}
+
+// GenerateKey generates a new random ML-DSA private key.
+func GenerateKey(params Parameters) (*PrivateKey, error) {
+	return nil, errUnavailable
+}
+
+// NewPrivateKey decodes an ML-DSA private key from the given seed.
+//
+// The seed must be exactly [PrivateKeySize] bytes long.
+func NewPrivateKey(params Parameters, seed []byte) (*PrivateKey, error) {
+	return nil, errUnavailable
+}
+
+// Public returns the corresponding [PublicKey] for this private key.
+//
+// It implements the [crypto.Signer] interface.
+func (sk *PrivateKey) Public() crypto.PublicKey {
+	panic("mldsa: methods are unreachable in FIPS 140-3 Go Cryptographic Module v1.0.0")
+}
+
+// Equal reports whether sk and x are the same key (i.e. they are derived from
+// the same seed).
+//
+// If x is not a *PrivateKey, Equal returns false.
+func (sk *PrivateKey) Equal(x crypto.PrivateKey) bool {
+	panic("mldsa: methods are unreachable in FIPS 140-3 Go Cryptographic Module v1.0.0")
+}
+
+// PublicKey returns the corresponding [PublicKey] for this private key.
+func (sk *PrivateKey) PublicKey() *PublicKey {
+	panic("mldsa: methods are unreachable in FIPS 140-3 Go Cryptographic Module v1.0.0")
+}
+
+// Bytes returns the private key seed.
+func (sk *PrivateKey) Bytes() []byte {
+	panic("mldsa: methods are unreachable in FIPS 140-3 Go Cryptographic Module v1.0.0")
+}
+
+// Sign returns a signature of the given message using this private key.
+//
+// If opts is nil or opts.HashFunc returns zero, the message is signed directly.
+// If opts.HashFunc returns [crypto.MLDSAMu], the provided message must be a
+// [pre-hashed μ message representative]. opts can be of type *[Options].
+// The io.Reader argument is ignored.
+//
+// [pre-hashed μ message representative]: https://www.rfc-editor.org/rfc/rfc9881.html#externalmu
+func (sk *PrivateKey) Sign(_ io.Reader, message []byte, opts crypto.SignerOpts) (signature []byte, err error) {
+	panic("mldsa: methods are unreachable in FIPS 140-3 Go Cryptographic Module v1.0.0")
+}
+
+// SignDeterministic works like [PrivateKey.Sign], but the signature is
+// deterministic.
+func (sk *PrivateKey) SignDeterministic(message []byte, opts crypto.SignerOpts) (signature []byte, err error) {
+	panic("mldsa: methods are unreachable in FIPS 140-3 Go Cryptographic Module v1.0.0")
+}
+
+// PublicKey is an ML-DSA public key. It implements the informal extended
+// [crypto.PublicKey] interface.
+//
+// A PublicKey is safe for concurrent use.
+type PublicKey struct{}
+
+// NewPublicKey creates a new ML-DSA public key from the given encoding.
+func NewPublicKey(params Parameters, encoding []byte) (*PublicKey, error) {
+	return nil, errUnavailable
+}
+
+// Bytes returns the public key encoding.
+func (pk *PublicKey) Bytes() []byte {
+	panic("mldsa: methods are unreachable in FIPS 140-3 Go Cryptographic Module v1.0.0")
+}
+
+// Equal reports whether pk and x are the same key (i.e. they have the same
+// encoding).
+//
+// If x is not a *PublicKey, Equal returns false.
+func (pk *PublicKey) Equal(x crypto.PublicKey) bool {
+	panic("mldsa: methods are unreachable in FIPS 140-3 Go Cryptographic Module v1.0.0")
+}
+
+// Parameters returns the parameters associated with this public key.
+func (pk *PublicKey) Parameters() Parameters {
+	panic("mldsa: methods are unreachable in FIPS 140-3 Go Cryptographic Module v1.0.0")
+}
+
+// Verify reports whether signature is a valid signature of message by pk.
+// If opts is nil, it's equivalent to the zero value of Options.
+func Verify(pk *PublicKey, message []byte, signature []byte, opts *Options) error {
+	return errUnavailable
+}